Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in bunyan-redis-capella-html-webpack-plugin (npm) MAL-2025-185949 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-redis-capella-html-webpack-plugin |
Malicious release: Malicious code in bunyan-release-it-carpo-request (npm) MAL-2025-185950 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-release-it-carpo-request |
Malicious release: Malicious code in bunyan-resonance-mensa-concurrently (npm) MAL-2025-185951 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-resonance-mensa-concurrently |
Malicious release: Malicious code in bunyan-spectron-webdriver-less-magellan (npm) MAL-2025-185952 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-spectron-webdriver-less-magellan |
Malicious release: Malicious code in bunyan-titan-sadr-loop (npm) MAL-2025-185953 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-titan-sadr-loop |
Malicious release: Malicious code in byte-assert-finally-hot-sanitize (npm) MAL-2025-185954 | Malicious | Not scored | 13 Nov, 2025 | npm byte-assert-finally-hot-sanitize |
Malicious release: Malicious code in byte-decompress-cold-deploy-wind (npm) MAL-2025-185955 | Malicious | Not scored | 13 Nov, 2025 | npm byte-decompress-cold-deploy-wind |
Malicious release: Malicious code in byte-log-float-cold-analyze (npm) MAL-2025-185956 | Malicious | Not scored | 13 Nov, 2025 | npm byte-log-float-cold-analyze |
Malicious release: Malicious code in byte-nu-monitor-module-static (npm) MAL-2025-185957 | Malicious | Not scored | 13 Nov, 2025 | npm byte-nu-monitor-module-static |
Malicious release: Malicious code in byte-orchestrate-wind-water-private (npm) MAL-2025-185958 | Malicious | Not scored | 13 Nov, 2025 | npm byte-orchestrate-wind-water-private |
Malicious release: Malicious code in byte-root-test-kappa-sudo (npm) MAL-2025-185959 | Malicious | Not scored | 13 Nov, 2025 | npm byte-root-test-kappa-sudo |
Malicious release: Malicious code in byte-runtime-easy-promise-transpile (npm) MAL-2025-185960 | Malicious | Not scored | 13 Nov, 2025 | npm byte-runtime-easy-promise-transpile |
Malicious release: Malicious code in cache-cat-index-async-small (npm) MAL-2025-185961 | Malicious | Not scored | 13 Nov, 2025 | npm cache-cat-index-async-small |
Malicious release: Malicious code in cache-hercules-xerxes-commitizen (npm) MAL-2025-185962 | Malicious | Not scored | 13 Nov, 2025 | npm cache-hercules-xerxes-commitizen |
Malicious release: Malicious code in cache-less-venus-supercluster (npm) MAL-2025-185963 | Malicious | Not scored | 13 Nov, 2025 | npm cache-less-venus-supercluster |
Malicious release: Malicious code in cache-mensa-leda-build (npm) MAL-2025-185964 | Malicious | Not scored | 13 Nov, 2025 | npm cache-mensa-leda-build |
Malicious release: Malicious code in cache-meta-root-try-key (npm) MAL-2025-185965 | Malicious | Not scored | 13 Nov, 2025 | npm cache-meta-root-try-key |
Malicious release: Malicious code in cache-norma-protractor-superflare (npm) MAL-2025-185966 | Malicious | Not scored | 13 Nov, 2025 | npm cache-norma-protractor-superflare |
Malicious release: Malicious code in cache-phi-public-info-sed (npm) MAL-2025-185967 | Malicious | Not scored | 13 Nov, 2025 | npm cache-phi-public-info-sed |
Malicious release: Malicious code in cache-publish-decoherence-astroinformatics (npm) MAL-2025-185968 | Malicious | Not scored | 13 Nov, 2025 | npm cache-publish-decoherence-astroinformatics |
Malicious release: Malicious code in cache-simple-awk-sudo-class (npm) MAL-2025-185969 | Malicious | Not scored | 13 Nov, 2025 | npm cache-simple-awk-sudo-class |
Malicious release: Malicious code in cache-umbra-geoarchaeology-server (npm) MAL-2025-185970 | Malicious | Not scored | 13 Nov, 2025 | npm cache-umbra-geoarchaeology-server |
Malicious release: Malicious code in cache-xenos-regulus-rocket (npm) MAL-2025-185971 | Malicious | Not scored | 13 Nov, 2025 | npm cache-xenos-regulus-rocket |
Malicious release: Malicious code in cache-xml-stub-fire-nu (npm) MAL-2025-185972 | Malicious | Not scored | 13 Nov, 2025 | npm cache-xml-stub-fire-nu |
Malicious release: Malicious code in callback-dynamo-lacerta-chakra-ui (npm) MAL-2025-185973 | Malicious | Not scored | 13 Nov, 2025 | npm callback-dynamo-lacerta-chakra-ui |
Malicious release: Malicious code in callback-elara-hadron-jekyll (npm) MAL-2025-185974 | Malicious | Not scored | 13 Nov, 2025 | npm callback-elara-hadron-jekyll |
Malicious release: Malicious code in callback-fomalhaut-slidev-library (npm) MAL-2025-185975 | Malicious | Not scored | 13 Nov, 2025 | npm callback-fomalhaut-slidev-library |
Malicious release: Malicious code in callback-jekyll-public-nebula (npm) MAL-2025-185976 | Malicious | Not scored | 13 Nov, 2025 | npm callback-jekyll-public-nebula |
Malicious release: Malicious code in callback-kastra-wolf-abiogenesis (npm) MAL-2025-185977 | Malicious | Not scored | 13 Nov, 2025 | npm callback-kastra-wolf-abiogenesis |
Malicious release: Malicious code in callback-parallax-slides-metabolomics (npm) MAL-2025-185978 | Malicious | Not scored | 13 Nov, 2025 | npm callback-parallax-slides-metabolomics |
Malicious release: Malicious code in callback-saturnology-taphonomy-radiant (npm) MAL-2025-185979 | Malicious | Not scored | 13 Nov, 2025 | npm callback-saturnology-taphonomy-radiant |
Malicious release: Malicious code in callback-typeorm-venus-umbriel (npm) MAL-2025-185980 | Malicious | Not scored | 13 Nov, 2025 | npm callback-typeorm-venus-umbriel |
Malicious release: Malicious code in callback-upgrade-ophiuchus-achernar (npm) MAL-2025-185981 | Malicious | Not scored | 13 Nov, 2025 | npm callback-upgrade-ophiuchus-achernar |
Malicious release: Malicious code in callback-uranology-fork-rigel (npm) MAL-2025-185982 | Malicious | Not scored | 13 Nov, 2025 | npm callback-uranology-fork-rigel |
Malicious release: Malicious code in callback-xanthus-astrochemistry-quantum-computing (npm) MAL-2025-185983 | Malicious | Not scored | 13 Nov, 2025 | npm callback-xanthus-astrochemistry-quantum-computing |
Malicious release: Malicious code in callback-zephyr-semantic-ui-carpo (npm) MAL-2025-185984 | Malicious | Not scored | 13 Nov, 2025 | npm callback-zephyr-semantic-ui-carpo |
Malicious release: Malicious code in callisto-cors-ini-puppeteer (npm) MAL-2025-185985 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-cors-ini-puppeteer |
Malicious release: Malicious code in callisto-enif-cryonics-dotenv-parse-variables (npm) MAL-2025-185986 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-enif-cryonics-dotenv-parse-variables |
Malicious release: Malicious code in callisto-europa-buffer-nodemon (npm) MAL-2025-185987 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-europa-buffer-nodemon |
Malicious release: Malicious code in callisto-europa-relay-bootes (npm) MAL-2025-185988 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-europa-relay-bootes |
Malicious release: Malicious code in callisto-hyperion-dactyl-equinox (npm) MAL-2025-185989 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-hyperion-dactyl-equinox |
Malicious release: Malicious code in callisto-hyperion-norma-firebase (npm) MAL-2025-185990 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-hyperion-norma-firebase |
Malicious release: Malicious code in callisto-meissa-centaurus-sync (npm) MAL-2025-185991 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-meissa-centaurus-sync |
Malicious release: Malicious code in callisto-module-module-antares (npm) MAL-2025-185992 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-module-module-antares |
Malicious release: Malicious code in callisto-proxima-command-loglevel (npm) MAL-2025-185993 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-proxima-command-loglevel |
Malicious release: Malicious code in callisto-sirius-farout-multiverse (npm) MAL-2025-185994 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-sirius-farout-multiverse |
Malicious release: Malicious code in canopus-odin-scorpius-css-minimizer-webpack-plugin (npm) MAL-2025-185995 | Malicious | Not scored | 13 Nov, 2025 | npm canopus-odin-scorpius-css-minimizer-webpack-plugin |
Malicious release: Malicious code in capella-biotechnology-meteor-start (npm) MAL-2025-185996 | Malicious | Not scored | 13 Nov, 2025 | npm capella-biotechnology-meteor-start |
Malicious release: Malicious code in capella-cypress-stream-supernova (npm) MAL-2025-185997 | Malicious | Not scored | 13 Nov, 2025 | npm capella-cypress-stream-supernova |
Malicious release: Malicious code in capella-indus-config-relay (npm) MAL-2025-185998 | Malicious | Not scored | 13 Nov, 2025 | npm capella-indus-config-relay |