Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in bad-xml-simple-yaml-reject (npm) MAL-2025-185741 | Malicious | Not scored | 13 Nov, 2025 | npm bad-xml-simple-yaml-reject |
Malicious release: Malicious code in balance-char-byte-final-big (npm) MAL-2025-185742 | Malicious | Not scored | 13 Nov, 2025 | npm balance-char-byte-final-big |
Malicious release: Malicious code in balance-decompress-authorize-query-thread (npm) MAL-2025-185743 | Malicious | Not scored | 13 Nov, 2025 | npm balance-decompress-authorize-query-thread |
Malicious release: Malicious code in balance-dog-throw-balance-daemon (npm) MAL-2025-185744 | Malicious | Not scored | 13 Nov, 2025 | npm balance-dog-throw-balance-daemon |
Malicious release: Malicious code in balance-public-new-object-nu (npm) MAL-2025-185745 | Malicious | Not scored | 13 Nov, 2025 | npm balance-public-new-object-nu |
Malicious release: Malicious code in balance-quick-throw-bash-scale (npm) MAL-2025-185746 | Malicious | Not scored | 13 Nov, 2025 | npm balance-quick-throw-bash-scale |
Malicious release: Malicious code in barnard-kronos-rate-limiter-phoenix (npm) MAL-2025-185747 | Malicious | Not scored | 13 Nov, 2025 | npm barnard-kronos-rate-limiter-phoenix |
Malicious release: Malicious code in barnard-octans-development-async (npm) MAL-2025-185748 | Malicious | Not scored | 13 Nov, 2025 | npm barnard-octans-development-async |
Malicious release: Malicious code in barnard-perseus-comet-chromedriver (npm) MAL-2025-185749 | Malicious | Not scored | 13 Nov, 2025 | npm barnard-perseus-comet-chromedriver |
Malicious release: Malicious code in barnard-soap-gravitationalwave-meissa (npm) MAL-2025-185750 | Malicious | Not scored | 13 Nov, 2025 | npm barnard-soap-gravitationalwave-meissa |
Malicious release: Malicious code in baryon-antares-leda-cosmicsilence (npm) MAL-2025-185751 | Malicious | Not scored | 13 Nov, 2025 | npm baryon-antares-leda-cosmicsilence |
Malicious release: Malicious code in baryon-eslint-ariel-iota (npm) MAL-2025-185752 | Malicious | Not scored | 13 Nov, 2025 | npm baryon-eslint-ariel-iota |
Malicious release: Malicious code in baryon-helmet-apollo-meteor (npm) MAL-2025-185753 | Malicious | Not scored | 13 Nov, 2025 | npm baryon-helmet-apollo-meteor |
Malicious release: Malicious code in baryon-ini-biomimicry-entanglement (npm) MAL-2025-185754 | Malicious | Not scored | 13 Nov, 2025 | npm baryon-ini-biomimicry-entanglement |
Malicious release: Malicious code in baryon-perturbation-javascript-pyxis (npm) MAL-2025-185755 | Malicious | Not scored | 13 Nov, 2025 | npm baryon-perturbation-javascript-pyxis |
Malicious release: Malicious code in baryon-sublimation-apollo-shelljs (npm) MAL-2025-185756 | Malicious | Not scored | 13 Nov, 2025 | npm baryon-sublimation-apollo-shelljs |
Malicious release: Malicious code in bash-load-fast-unix-route (npm) MAL-2025-185757 | Malicious | Not scored | 13 Nov, 2025 | npm bash-load-fast-unix-route |
Malicious release: Malicious code in bash-runtime-log-static-java (npm) MAL-2025-185758 | Malicious | Not scored | 13 Nov, 2025 | npm bash-runtime-log-static-java |
Malicious release: Malicious code in bash-serialize-decode-grid-sudo (npm) MAL-2025-185759 | Malicious | Not scored | 13 Nov, 2025 | npm bash-serialize-decode-grid-sudo |
Malicious release: Malicious code in bash-unix-rho-sigma-quick (npm) MAL-2025-185760 | Malicious | Not scored | 13 Nov, 2025 | npm bash-unix-rho-sigma-quick |
Malicious release: Malicious code in bash-water-resolve-unix-error (npm) MAL-2025-185761 | Malicious | Not scored | 13 Nov, 2025 | npm bash-water-resolve-unix-error |
Malicious release: Malicious code in bash-xml-transpile-good-catch (npm) MAL-2025-185762 | Malicious | Not scored | 13 Nov, 2025 | npm bash-xml-transpile-good-catch |
Malicious release: Malicious code in bellatrix-axios-spica-geoarchaeology (npm) MAL-2025-185763 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-axios-spica-geoarchaeology |
Malicious release: Malicious code in bellatrix-bunyan-neptune-hydra (npm) MAL-2025-185764 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-bunyan-neptune-hydra |
Malicious release: Malicious code in bellatrix-child-process-playwright-geodynamo (npm) MAL-2025-185765 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-child-process-playwright-geodynamo |
Malicious release: Malicious code in bellatrix-command-testcafe-pino-pretty (npm) MAL-2025-185766 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-command-testcafe-pino-pretty |
Malicious release: Malicious code in bellatrix-gulp-barnard-dagda (npm) MAL-2025-185767 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-gulp-barnard-dagda |
Malicious release: Malicious code in bellatrix-local-puppeteer-epigenetics (npm) MAL-2025-185768 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-local-puppeteer-epigenetics |
Malicious release: Malicious code in bellatrix-mira-europa-commitlint (npm) MAL-2025-185769 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-mira-europa-commitlint |
Malicious release: Malicious code in bellatrix-odin-redis-commitlint (npm) MAL-2025-185770 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-odin-redis-commitlint |
Malicious release: Malicious code in bellatrix-panspermia-websockets-gulp (npm) MAL-2025-185771 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-panspermia-websockets-gulp |
Malicious release: Malicious code in bellatrix-prompts-webpack-paleobotany (npm) MAL-2025-185772 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-prompts-webpack-paleobotany |
Malicious release: Malicious code in bellatrix-proteomics-meissa-redis (npm) MAL-2025-185773 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-proteomics-meissa-redis |
Malicious release: Malicious code in bellatrix-pulsar-bionics-cryovolcano (npm) MAL-2025-185774 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-pulsar-bionics-cryovolcano |
Malicious release: Malicious code in bellatrix-quantum-inquirer-child-process (npm) MAL-2025-185775 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-quantum-inquirer-child-process |
Malicious release: Malicious code in bellatrix-websockets-filament-biohacking (npm) MAL-2025-185776 | Malicious | Not scored | 13 Nov, 2025 | npm bellatrix-websockets-filament-biohacking |
Malicious release: Malicious code in benchmark-refactor-secure-scale-array (npm) MAL-2025-185777 | Malicious | Not scored | 13 Nov, 2025 | npm benchmark-refactor-secure-scale-array |
Malicious release: Malicious code in benchmark-view-mu-cat-virtualize (npm) MAL-2025-185778 | Malicious | Not scored | 13 Nov, 2025 | npm benchmark-view-mu-cat-virtualize |
Malicious release: Malicious code in beta-enum-notify-view-stack (npm) MAL-2025-185779 | Malicious | Not scored | 13 Nov, 2025 | npm beta-enum-notify-view-stack |
Malicious release: Malicious code in beta-error-rho-authenticate-tree (npm) MAL-2025-185780 | Malicious | Not scored | 13 Nov, 2025 | npm beta-error-rho-authenticate-tree |
Malicious release: Malicious code in beta-grep-cron-omega-validate (npm) MAL-2025-185781 | Malicious | Not scored | 13 Nov, 2025 | npm beta-grep-cron-omega-validate |
Malicious release: Malicious code in beta-key-promise-socket-file (npm) MAL-2025-185782 | Malicious | Not scored | 13 Nov, 2025 | npm beta-key-promise-socket-file |
Malicious release: Malicious code in beta-moon-fast-authorize-deploy (npm) MAL-2025-185783 | Malicious | Not scored | 13 Nov, 2025 | npm beta-moon-fast-authorize-deploy |
Malicious release: Malicious code in beta-orchestrate-slow-void-table (npm) MAL-2025-185784 | Malicious | Not scored | 13 Nov, 2025 | npm beta-orchestrate-slow-void-table |
Malicious release: Malicious code in beta-try-omicron-orchestrate-analyze (npm) MAL-2025-185785 | Malicious | Not scored | 13 Nov, 2025 | npm beta-try-omicron-orchestrate-analyze |
Malicious release: Malicious code in betelgeuse-antd-magellan-xanthus (npm) MAL-2025-185786 | Malicious | Not scored | 13 Nov, 2025 | npm betelgeuse-antd-magellan-xanthus |
Malicious release: Malicious code in betelgeuse-backend-primatology-query (npm) MAL-2025-185787 | Malicious | Not scored | 13 Nov, 2025 | npm betelgeuse-backend-primatology-query |
Malicious release: Malicious code in betelgeuse-cassini-lyra-firebase (npm) MAL-2025-185788 | Malicious | Not scored | 13 Nov, 2025 | npm betelgeuse-cassini-lyra-firebase |
Malicious release: Malicious code in betelgeuse-csrf-aldebaran-json (npm) MAL-2025-185789 | Malicious | Not scored | 13 Nov, 2025 | npm betelgeuse-csrf-aldebaran-json |
Malicious release: Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet (npm) MAL-2025-185790 | Malicious | Not scored | 13 Nov, 2025 | npm betelgeuse-dactyl-rollup-plugin-quasarjet |