Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in blazar-pegasus-quark-grunt (npm) MAL-2025-185849 | Malicious | Not scored | 13 Nov, 2025 | npm blazar-pegasus-quark-grunt |
Malicious release: Malicious code in blazar-quark-publish-quito (npm) MAL-2025-185850 | Malicious | Not scored | 13 Nov, 2025 | npm blazar-quark-publish-quito |
Malicious release: Malicious code in blaze-antares-taurus-prompts (npm) MAL-2025-185851 | Malicious | Not scored | 13 Nov, 2025 | npm blaze-antares-taurus-prompts |
Malicious release: Malicious code in blaze-farout-module-transport (npm) MAL-2025-185852 | Malicious | Not scored | 13 Nov, 2025 | npm blaze-farout-module-transport |
Malicious release: Malicious code in blaze-figures-auth0-proxima (npm) MAL-2025-185853 | Malicious | Not scored | 13 Nov, 2025 | npm blaze-figures-auth0-proxima |
Malicious release: Malicious code in blaze-transport-eridanus-singularitarianism (npm) MAL-2025-185854 | Malicious | Not scored | 13 Nov, 2025 | npm blaze-transport-eridanus-singularitarianism |
Malicious release: Malicious code in blaze-transport-genomics-telesto (npm) MAL-2025-185855 | Malicious | Not scored | 13 Nov, 2025 | npm blaze-transport-genomics-telesto |
Malicious release: Malicious code in blitz-eslint-plugin-csrf-indus (npm) MAL-2025-185856 | Malicious | Not scored | 13 Nov, 2025 | npm blitz-eslint-plugin-csrf-indus |
Malicious release: Malicious code in blitz-ganymede-aether-gridsome (npm) MAL-2025-185857 | Malicious | Not scored | 13 Nov, 2025 | npm blitz-ganymede-aether-gridsome |
Malicious release: Malicious code in blitz-hawkingradiation-helmet-postgres (npm) MAL-2025-185858 | Malicious | Not scored | 13 Nov, 2025 | npm blitz-hawkingradiation-helmet-postgres |
Malicious release: Malicious code in blitz-materialize-link-lint-staged (npm) MAL-2025-185859 | Malicious | Not scored | 13 Nov, 2025 | npm blitz-materialize-link-lint-staged |
Malicious release: Malicious code in blitz-nuxtjs-cosmicray-paleoceanography (npm) MAL-2025-185860 | Malicious | Not scored | 13 Nov, 2025 | npm blitz-nuxtjs-cosmicray-paleoceanography |
Malicious release: Malicious code in blueshift-canopus-leda-higgs (npm) MAL-2025-185861 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-canopus-leda-higgs |
Malicious release: Malicious code in blueshift-exoplanet-buffer-primatology (npm) MAL-2025-185862 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-exoplanet-buffer-primatology |
Malicious release: Malicious code in blueshift-kuiperbelt-asteroid-dendrochronology (npm) MAL-2025-185863 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-kuiperbelt-asteroid-dendrochronology |
Malicious release: Malicious code in blueshift-lynx-dotenv-safe-morgan (npm) MAL-2025-185864 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-lynx-dotenv-safe-morgan |
Malicious release: Malicious code in blueshift-perturbation-centauri-paleoceanography (npm) MAL-2025-185865 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-perturbation-centauri-paleoceanography |
Malicious release: Malicious code in blueshift-publish-carina-nconf (npm) MAL-2025-185866 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-publish-carina-nconf |
Malicious release: Malicious code in blueshift-standard-altair-higgs (npm) MAL-2025-185867 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-standard-altair-higgs |
Malicious release: Malicious code in blueshift-toml-bellatrix-blueshift (npm) MAL-2025-185868 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-toml-bellatrix-blueshift |
Malicious release: Malicious code in book-boolean-runtime-grep-root (npm) MAL-2025-185869 | Malicious | Not scored | 13 Nov, 2025 | npm book-boolean-runtime-grep-root |
Malicious release: Malicious code in book-compile-try-fork-kernel (npm) MAL-2025-185870 | Malicious | Not scored | 13 Nov, 2025 | npm book-compile-try-fork-kernel |
Malicious release: Malicious code in book-data-short-index-object (npm) MAL-2025-185871 | Malicious | Not scored | 13 Nov, 2025 | npm book-data-short-index-object |
Malicious release: Malicious code in book-earth-runtime-delta-chi (npm) MAL-2025-185872 | Malicious | Not scored | 13 Nov, 2025 | npm book-earth-runtime-delta-chi |
Malicious release: Malicious code in book-good-old-sun-test (npm) MAL-2025-185873 | Malicious | Not scored | 13 Nov, 2025 | npm book-good-old-sun-test |
Malicious release: Malicious code in book-sanitize-cat-cold-class (npm) MAL-2025-185874 | Malicious | Not scored | 13 Nov, 2025 | npm book-sanitize-cat-cold-class |
Malicious release: Malicious code in book-web-deploy-object-byte (npm) MAL-2025-185875 | Malicious | Not scored | 13 Nov, 2025 | npm book-web-deploy-object-byte |
Malicious release: Malicious code in boolean-balance-delta-visualize-resolve (npm) MAL-2025-185876 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-balance-delta-visualize-resolve |
Malicious release: Malicious code in boolean-double-benchmark-star-node (npm) MAL-2025-185877 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-double-benchmark-star-node |
Malicious release: Malicious code in boolean-fork-uglify-dog-sanitize (npm) MAL-2025-185878 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-fork-uglify-dog-sanitize |
Malicious release: Malicious code in boolean-reject-balance-sun-slow (npm) MAL-2025-185879 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-reject-balance-sun-slow |
Malicious release: Malicious code in boolean-xml-encrypt-hash-enum (npm) MAL-2025-185880 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-xml-encrypt-hash-enum |
Malicious release: Malicious code in boolean-zeta-fire-omega-lambda (npm) MAL-2025-185881 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-zeta-fire-omega-lambda |
Malicious release: Malicious code in bootes-config-docusaurus-ultra (npm) MAL-2025-185882 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-config-docusaurus-ultra |
Malicious release: Malicious code in bootes-global-luna-galaxy (npm) MAL-2025-185883 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-global-luna-galaxy |
Malicious release: Malicious code in bootes-reveal-md-cache-antares (npm) MAL-2025-185884 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-reveal-md-cache-antares |
Malicious release: Malicious code in bootes-terser-local-sqlite (npm) MAL-2025-185885 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-terser-local-sqlite |
Malicious release: Malicious code in bootes-transform-nuxtjs-proxima (npm) MAL-2025-185886 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-transform-nuxtjs-proxima |
Malicious release: Malicious code in bootstrap-cluster-fornax-link (npm) MAL-2025-185887 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-cluster-fornax-link |
Malicious release: Malicious code in bootstrap-forever-uranology-colors (npm) MAL-2025-185888 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-forever-uranology-colors |
Malicious release: Malicious code in bootstrap-fusion-loop-restart (npm) MAL-2025-185889 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-fusion-loop-restart |
Malicious release: Malicious code in bootstrap-futurology-bootstrap-html-webpack-plugin (npm) MAL-2025-185890 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-futurology-bootstrap-html-webpack-plugin |
Malicious release: Malicious code in bootstrap-kastra-event-scripts (npm) MAL-2025-185891 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-kastra-event-scripts |
Malicious release: Malicious code in bootstrap-semantic-release-pulsar-koa (npm) MAL-2025-185892 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-semantic-release-pulsar-koa |
Malicious release: Malicious code in bootstrap-solis-bulma-zooarchaeology (npm) MAL-2025-185893 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-solis-bulma-zooarchaeology |
Malicious release: Malicious code in borealis-dagda-impulse-pm2 (npm) MAL-2025-185894 | Malicious | Not scored | 13 Nov, 2025 | npm borealis-dagda-impulse-pm2 |
Malicious release: Malicious code in borealis-hercules-ora-lyra (npm) MAL-2025-185895 | Malicious | Not scored | 13 Nov, 2025 | npm borealis-hercules-ora-lyra |
Malicious release: Malicious code in borealis-hermes-bellatrix-geochronology (npm) MAL-2025-185896 | Malicious | Not scored | 13 Nov, 2025 | npm borealis-hermes-bellatrix-geochronology |
Malicious release: Malicious code in borealis-promise-spinner-ora (npm) MAL-2025-185897 | Malicious | Not scored | 13 Nov, 2025 | npm borealis-promise-spinner-ora |
Malicious release: Malicious code in borealis-rigel-string-exoplanetology (npm) MAL-2025-185898 | Malicious | Not scored | 13 Nov, 2025 | npm borealis-rigel-string-exoplanetology |