Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in boson-apex-parcel-cybernetics (npm) MAL-2025-185899 | Malicious | Not scored | 13 Nov, 2025 | npm boson-apex-parcel-cybernetics |
Malicious release: Malicious code in boson-build-tachyon-solis (npm) MAL-2025-185900 | Malicious | Not scored | 13 Nov, 2025 | npm boson-build-tachyon-solis |
Malicious release: Malicious code in boson-forever-leda-pegasus (npm) MAL-2025-185901 | Malicious | Not scored | 13 Nov, 2025 | npm boson-forever-leda-pegasus |
Malicious release: Malicious code in boson-fornax-redshift-andromeda (npm) MAL-2025-185902 | Malicious | Not scored | 13 Nov, 2025 | npm boson-fornax-redshift-andromeda |
Malicious release: Malicious code in boson-hugo-cosmology-mineralogy (npm) MAL-2025-185903 | Malicious | Not scored | 13 Nov, 2025 | npm boson-hugo-cosmology-mineralogy |
Malicious release: Malicious code in boson-module-subscription-scripts (npm) MAL-2025-185904 | Malicious | Not scored | 13 Nov, 2025 | npm boson-module-subscription-scripts |
Malicious release: Malicious code in boson-style-loader-less-loader-superflare (npm) MAL-2025-185905 | Malicious | Not scored | 13 Nov, 2025 | npm boson-style-loader-less-loader-superflare |
Malicious release: Malicious code in brane-halley-solarnebula-stratosphere (npm) MAL-2025-185906 | Malicious | Not scored | 13 Nov, 2025 | npm brane-halley-solarnebula-stratosphere |
Malicious release: Malicious code in brane-kardashevscale-coronalmassejection-izar (npm) MAL-2025-185907 | Malicious | Not scored | 13 Nov, 2025 | npm brane-kardashevscale-coronalmassejection-izar |
Malicious release: Malicious code in brane-mocha-elektra-farout (npm) MAL-2025-185908 | Malicious | Not scored | 13 Nov, 2025 | npm brane-mocha-elektra-farout |
Malicious release: Malicious code in brane-nashira-cluster-spawn (npm) MAL-2025-185909 | Malicious | Not scored | 13 Nov, 2025 | npm brane-nashira-cluster-spawn |
Malicious release: Malicious code in brane-pm2-isostasy-jekyll (npm) MAL-2025-185910 | Malicious | Not scored | 13 Nov, 2025 | npm brane-pm2-isostasy-jekyll |
Malicious release: Malicious code in brane-venus-betelgeuse-altair (npm) MAL-2025-185911 | Malicious | Not scored | 13 Nov, 2025 | npm brane-venus-betelgeuse-altair |
Malicious release: Malicious code in browserify-astrometry-stratigraphy-foundation (npm) MAL-2025-185912 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-astrometry-stratigraphy-foundation |
Malicious release: Malicious code in browserify-cosmiconfig-testcafe-await (npm) MAL-2025-185913 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-cosmiconfig-testcafe-await |
Malicious release: Malicious code in browserify-eslint-plugin-heka-mui (npm) MAL-2025-185914 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-eslint-plugin-heka-mui |
Malicious release: Malicious code in browserify-izar-archaeogenetics-darkmatter (npm) MAL-2025-185915 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-izar-archaeogenetics-darkmatter |
Malicious release: Malicious code in browserify-nodemon-proxima-markdown (npm) MAL-2025-185916 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-nodemon-proxima-markdown |
Malicious release: Malicious code in browserify-sedna-apollo-airbnb (npm) MAL-2025-185917 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-sedna-apollo-airbnb |
Malicious release: Malicious code in browserify-seismology-vega-quito (npm) MAL-2025-185918 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-seismology-vega-quito |
Malicious release: Malicious code in buffer-aldebaran-norma-test (npm) MAL-2025-185919 | Malicious | Not scored | 13 Nov, 2025 | npm buffer-aldebaran-norma-test |
Malicious release: Malicious code in buffer-apex-paleontology-cli (npm) MAL-2025-185920 | Malicious | Not scored | 13 Nov, 2025 | npm buffer-apex-paleontology-cli |
Malicious release: Malicious code in buffer-css-loader-draco-sirius (npm) MAL-2025-185921 | Malicious | Not scored | 13 Nov, 2025 | npm buffer-css-loader-draco-sirius |
Malicious release: Malicious code in buffer-mocha-astrophysics-technosignature (npm) MAL-2025-185922 | Malicious | Not scored | 13 Nov, 2025 | npm buffer-mocha-astrophysics-technosignature |
Malicious release: Malicious code in buffer-package-bionics-graphql (npm) MAL-2025-185923 | Malicious | Not scored | 13 Nov, 2025 | npm buffer-package-bionics-graphql |
Malicious release: Malicious code in build-commitlint-config-angular-lithosphere-string (npm) MAL-2025-185924 | Malicious | Not scored | 13 Nov, 2025 | npm build-commitlint-config-angular-lithosphere-string |
Malicious release: Malicious code in build-eleventy-deneb-gemini (npm) MAL-2025-185925 | Malicious | Not scored | 13 Nov, 2025 | npm build-eleventy-deneb-gemini |
Malicious release: Malicious code in build-enceladus-supernova-joviology (npm) MAL-2025-185926 | Malicious | Not scored | 13 Nov, 2025 | npm build-enceladus-supernova-joviology |
Malicious release: Malicious code in build-farout-cz-conventional-changelog-rocket (npm) MAL-2025-185927 | Malicious | Not scored | 13 Nov, 2025 | npm build-farout-cz-conventional-changelog-rocket |
Malicious release: Malicious code in build-geoarchaeology-mutation-library (npm) MAL-2025-185928 | Malicious | Not scored | 13 Nov, 2025 | npm build-geoarchaeology-mutation-library |
Malicious release: Malicious code in build-hapi-registry-quark (npm) MAL-2025-185929 | Malicious | Not scored | 13 Nov, 2025 | npm build-hapi-registry-quark |
Malicious release: Malicious code in build-neptunology-neptunology-adonis (npm) MAL-2025-185930 | Malicious | Not scored | 13 Nov, 2025 | npm build-neptunology-neptunology-adonis |
Malicious release: Malicious code in build-perseus-repository-asteroid (npm) MAL-2025-185931 | Malicious | Not scored | 13 Nov, 2025 | npm build-perseus-repository-asteroid |
Malicious release: Malicious code in bulma-equinox-build-nova (npm) MAL-2025-185932 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-equinox-build-nova |
Malicious release: Malicious code in bulma-interferometry-mesosphere-jabbah (npm) MAL-2025-185933 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-interferometry-mesosphere-jabbah |
Malicious release: Malicious code in bulma-promise-redgiant-xenobiology (npm) MAL-2025-185934 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-promise-redgiant-xenobiology |
Malicious release: Malicious code in bulma-rate-limiter-nodemon-aurora (npm) MAL-2025-185935 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-rate-limiter-nodemon-aurora |
Malicious release: Malicious code in bulma-regulus-mesosphere-resolvers (npm) MAL-2025-185936 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-regulus-mesosphere-resolvers |
Malicious release: Malicious code in bulma-titan-axios-ariel (npm) MAL-2025-185937 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-titan-axios-ariel |
Malicious release: Malicious code in bulma-yonder-acamar-ichnology (npm) MAL-2025-185938 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-yonder-acamar-ichnology |
Malicious release: Malicious code in bundle-alert-runtime-private-bundle (npm) MAL-2025-185939 | Malicious | Not scored | 13 Nov, 2025 | npm bundle-alert-runtime-private-bundle |
Malicious release: Malicious code in bundle-static-pipe-mu-float (npm) MAL-2025-185940 | Malicious | Not scored | 13 Nov, 2025 | npm bundle-static-pipe-mu-float |
Malicious release: Malicious code in bundle-theta-virtualize-sanitize-sigma (npm) MAL-2025-185941 | Malicious | Not scored | 13 Nov, 2025 | npm bundle-theta-virtualize-sanitize-sigma |
Malicious release: Malicious code in bunyan-areology-glaciology-charon (npm) MAL-2025-185942 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-areology-glaciology-charon |
Malicious release: Malicious code in bunyan-callback-pipe-mysql (npm) MAL-2025-185943 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-callback-pipe-mysql |
Malicious release: Malicious code in bunyan-carina-adonis-mysql (npm) MAL-2025-185944 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-carina-adonis-mysql |
Malicious release: Malicious code in bunyan-cosmicray-membrane-terser (npm) MAL-2025-185945 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-cosmicray-membrane-terser |
Malicious release: Malicious code in bunyan-jasmine-winston-geoarchaeology (npm) MAL-2025-185946 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-jasmine-winston-geoarchaeology |
Malicious release: Malicious code in bunyan-pegasus-primatology-quantum-computing (npm) MAL-2025-185947 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-pegasus-primatology-quantum-computing |
Malicious release: Malicious code in bunyan-radioastronomy-interstellarmedium-outercore (npm) MAL-2025-185948 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-radioastronomy-interstellarmedium-outercore |