Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in biosignature-spawn-slidev-envconfig (npm) MAL-2025-185834 | Malicious | Not scored | 13 Nov, 2025 | npm biosignature-spawn-slidev-envconfig |
Malicious release: Malicious code in biosignature-winston-xanthus-octans (npm) MAL-2025-185835 | Malicious | Not scored | 13 Nov, 2025 | npm biosignature-winston-xanthus-octans |
Malicious release: Malicious code in biotechnology-apollo-rollup-plugin-nodemon (npm) MAL-2025-185836 | Malicious | Not scored | 13 Nov, 2025 | npm biotechnology-apollo-rollup-plugin-nodemon |
Malicious release: Malicious code in biotechnology-corvus-phoebe-inquirer (npm) MAL-2025-185837 | Malicious | Not scored | 13 Nov, 2025 | npm biotechnology-corvus-phoebe-inquirer |
Malicious release: Malicious code in biotechnology-draco-webpack-bellatrix (npm) MAL-2025-185838 | Malicious | Not scored | 13 Nov, 2025 | npm biotechnology-draco-webpack-bellatrix |
Malicious release: Malicious code in biotechnology-enceladus-jovian-changelog (npm) MAL-2025-185839 | Malicious | Not scored | 13 Nov, 2025 | npm biotechnology-enceladus-jovian-changelog |
Malicious release: Malicious code in biotechnology-halley-redgiant-sirius (npm) MAL-2025-185840 | Malicious | Not scored | 13 Nov, 2025 | npm biotechnology-halley-redgiant-sirius |
Malicious release: Malicious code in biotechnology-planckscale-nightwatch-bellatrix (npm) MAL-2025-185841 | Malicious | Not scored | 13 Nov, 2025 | npm biotechnology-planckscale-nightwatch-bellatrix |
Malicious release: Malicious code in biotechnology-testcafe-cygnus-auriga (npm) MAL-2025-185842 | Malicious | Not scored | 13 Nov, 2025 | npm biotechnology-testcafe-cygnus-auriga |
Malicious release: Malicious code in blackhole-jupiter-spectron-webdriver-meteor (npm) MAL-2025-185843 | Malicious | Not scored | 13 Nov, 2025 | npm blackhole-jupiter-spectron-webdriver-meteor |
Malicious release: Malicious code in blackhole-prettier-plugin-markdown-achernar-redis (npm) MAL-2025-185844 | Malicious | Not scored | 13 Nov, 2025 | npm blackhole-prettier-plugin-markdown-achernar-redis |
Malicious release: Malicious code in blazar-apollo-async-barnard (npm) MAL-2025-185845 | Malicious | Not scored | 13 Nov, 2025 | npm blazar-apollo-async-barnard |
Malicious release: Malicious code in blazar-draco-mesosphere-mineralogy (npm) MAL-2025-185846 | Malicious | Not scored | 13 Nov, 2025 | npm blazar-draco-mesosphere-mineralogy |
Malicious release: Malicious code in blazar-ganymede-nebula-bunyan (npm) MAL-2025-185847 | Malicious | Not scored | 13 Nov, 2025 | npm blazar-ganymede-nebula-bunyan |
Malicious release: Malicious code in blazar-markdown-umbriel-filament (npm) MAL-2025-185848 | Malicious | Not scored | 13 Nov, 2025 | npm blazar-markdown-umbriel-filament |
Malicious release: Malicious code in blazar-pegasus-quark-grunt (npm) MAL-2025-185849 | Malicious | Not scored | 13 Nov, 2025 | npm blazar-pegasus-quark-grunt |
Malicious release: Malicious code in blazar-quark-publish-quito (npm) MAL-2025-185850 | Malicious | Not scored | 13 Nov, 2025 | npm blazar-quark-publish-quito |
Malicious release: Malicious code in blaze-antares-taurus-prompts (npm) MAL-2025-185851 | Malicious | Not scored | 13 Nov, 2025 | npm blaze-antares-taurus-prompts |
Malicious release: Malicious code in blaze-farout-module-transport (npm) MAL-2025-185852 | Malicious | Not scored | 13 Nov, 2025 | npm blaze-farout-module-transport |
Malicious release: Malicious code in blaze-figures-auth0-proxima (npm) MAL-2025-185853 | Malicious | Not scored | 13 Nov, 2025 | npm blaze-figures-auth0-proxima |
Malicious release: Malicious code in blaze-transport-eridanus-singularitarianism (npm) MAL-2025-185854 | Malicious | Not scored | 13 Nov, 2025 | npm blaze-transport-eridanus-singularitarianism |
Malicious release: Malicious code in blaze-transport-genomics-telesto (npm) MAL-2025-185855 | Malicious | Not scored | 13 Nov, 2025 | npm blaze-transport-genomics-telesto |
Malicious release: Malicious code in blitz-eslint-plugin-csrf-indus (npm) MAL-2025-185856 | Malicious | Not scored | 13 Nov, 2025 | npm blitz-eslint-plugin-csrf-indus |
Malicious release: Malicious code in blitz-ganymede-aether-gridsome (npm) MAL-2025-185857 | Malicious | Not scored | 13 Nov, 2025 | npm blitz-ganymede-aether-gridsome |
Malicious release: Malicious code in blitz-hawkingradiation-helmet-postgres (npm) MAL-2025-185858 | Malicious | Not scored | 13 Nov, 2025 | npm blitz-hawkingradiation-helmet-postgres |
Malicious release: Malicious code in blitz-materialize-link-lint-staged (npm) MAL-2025-185859 | Malicious | Not scored | 13 Nov, 2025 | npm blitz-materialize-link-lint-staged |
Malicious release: Malicious code in blitz-nuxtjs-cosmicray-paleoceanography (npm) MAL-2025-185860 | Malicious | Not scored | 13 Nov, 2025 | npm blitz-nuxtjs-cosmicray-paleoceanography |
Malicious release: Malicious code in blueshift-canopus-leda-higgs (npm) MAL-2025-185861 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-canopus-leda-higgs |
Malicious release: Malicious code in blueshift-exoplanet-buffer-primatology (npm) MAL-2025-185862 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-exoplanet-buffer-primatology |
Malicious release: Malicious code in blueshift-kuiperbelt-asteroid-dendrochronology (npm) MAL-2025-185863 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-kuiperbelt-asteroid-dendrochronology |
Malicious release: Malicious code in blueshift-lynx-dotenv-safe-morgan (npm) MAL-2025-185864 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-lynx-dotenv-safe-morgan |
Malicious release: Malicious code in blueshift-perturbation-centauri-paleoceanography (npm) MAL-2025-185865 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-perturbation-centauri-paleoceanography |
Malicious release: Malicious code in blueshift-publish-carina-nconf (npm) MAL-2025-185866 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-publish-carina-nconf |
Malicious release: Malicious code in blueshift-standard-altair-higgs (npm) MAL-2025-185867 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-standard-altair-higgs |
Malicious release: Malicious code in blueshift-toml-bellatrix-blueshift (npm) MAL-2025-185868 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-toml-bellatrix-blueshift |
Malicious release: Malicious code in book-boolean-runtime-grep-root (npm) MAL-2025-185869 | Malicious | Not scored | 13 Nov, 2025 | npm book-boolean-runtime-grep-root |
Malicious release: Malicious code in book-compile-try-fork-kernel (npm) MAL-2025-185870 | Malicious | Not scored | 13 Nov, 2025 | npm book-compile-try-fork-kernel |
Malicious release: Malicious code in book-data-short-index-object (npm) MAL-2025-185871 | Malicious | Not scored | 13 Nov, 2025 | npm book-data-short-index-object |
Malicious release: Malicious code in book-earth-runtime-delta-chi (npm) MAL-2025-185872 | Malicious | Not scored | 13 Nov, 2025 | npm book-earth-runtime-delta-chi |
Malicious release: Malicious code in book-good-old-sun-test (npm) MAL-2025-185873 | Malicious | Not scored | 13 Nov, 2025 | npm book-good-old-sun-test |
Malicious release: Malicious code in book-sanitize-cat-cold-class (npm) MAL-2025-185874 | Malicious | Not scored | 13 Nov, 2025 | npm book-sanitize-cat-cold-class |
Malicious release: Malicious code in book-web-deploy-object-byte (npm) MAL-2025-185875 | Malicious | Not scored | 13 Nov, 2025 | npm book-web-deploy-object-byte |
Malicious release: Malicious code in boolean-balance-delta-visualize-resolve (npm) MAL-2025-185876 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-balance-delta-visualize-resolve |
Malicious release: Malicious code in boolean-double-benchmark-star-node (npm) MAL-2025-185877 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-double-benchmark-star-node |
Malicious release: Malicious code in boolean-fork-uglify-dog-sanitize (npm) MAL-2025-185878 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-fork-uglify-dog-sanitize |
Malicious release: Malicious code in boolean-reject-balance-sun-slow (npm) MAL-2025-185879 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-reject-balance-sun-slow |
Malicious release: Malicious code in boolean-xml-encrypt-hash-enum (npm) MAL-2025-185880 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-xml-encrypt-hash-enum |
Malicious release: Malicious code in boolean-zeta-fire-omega-lambda (npm) MAL-2025-185881 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-zeta-fire-omega-lambda |
Malicious release: Malicious code in bootes-config-docusaurus-ultra (npm) MAL-2025-185882 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-config-docusaurus-ultra |
Malicious release: Malicious code in bootes-global-luna-galaxy (npm) MAL-2025-185883 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-global-luna-galaxy |