Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in capella-non-blocking-avior-jabbah (npm) MAL-2025-185999 | Malicious | Not scored | 13 Nov, 2025 | npm capella-non-blocking-avior-jabbah |
Malicious release: Malicious code in capella-proxima-geomorphology-sirius (npm) MAL-2025-186000 | Malicious | Not scored | 13 Nov, 2025 | npm capella-proxima-geomorphology-sirius |
Malicious release: Malicious code in capella-tethys-lynx-antimatter (npm) MAL-2025-186001 | Malicious | Not scored | 13 Nov, 2025 | npm capella-tethys-lynx-antimatter |
Malicious release: Malicious code in capella-yaml-innercore-hermes (npm) MAL-2025-186002 | Malicious | Not scored | 13 Nov, 2025 | npm capella-yaml-innercore-hermes |
Malicious release: Malicious code in carina-solis-ultra-rimraf (npm) MAL-2025-186003 | Malicious | Not scored | 13 Nov, 2025 | npm carina-solis-ultra-rimraf |
Malicious release: Malicious code in carina-telesto-taurus-cladistics (npm) MAL-2025-186004 | Malicious | Not scored | 13 Nov, 2025 | npm carina-telesto-taurus-cladistics |
Malicious release: Malicious code in carpo-aurora-pegasus-sqlite (npm) MAL-2025-186005 | Malicious | Not scored | 13 Nov, 2025 | npm carpo-aurora-pegasus-sqlite |
Malicious release: Malicious code in carpo-hermes-firebase-nightmare (npm) MAL-2025-186006 | Malicious | Not scored | 13 Nov, 2025 | npm carpo-hermes-firebase-nightmare |
Malicious release: Malicious code in carpo-lynx-sirius-sirius (npm) MAL-2025-186007 | Malicious | Not scored | 13 Nov, 2025 | npm carpo-lynx-sirius-sirius |
Malicious release: Malicious code in carpo-mdx-comet-hyperion (npm) MAL-2025-186008 | Malicious | Not scored | 13 Nov, 2025 | npm carpo-mdx-comet-hyperion |
Malicious release: Malicious code in carpo-release-it-oberon-halley (npm) MAL-2025-186009 | Malicious | Not scored | 13 Nov, 2025 | npm carpo-release-it-oberon-halley |
Malicious release: Malicious code in cassini-frontend-umbriel-ophiuchus (npm) MAL-2025-186010 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-frontend-umbriel-ophiuchus |
Malicious release: Malicious code in cassini-halley-jekyll-less (npm) MAL-2025-186011 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-halley-jekyll-less |
Malicious release: Malicious code in cassini-hawkingradiation-rocket-sedna (npm) MAL-2025-186012 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-hawkingradiation-rocket-sedna |
Malicious release: Malicious code in cassini-html-webpack-plugin-loglevel-jest (npm) MAL-2025-186013 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-html-webpack-plugin-loglevel-jest |
Malicious release: Malicious code in cassini-markdown-pdf-fork-polaris (npm) MAL-2025-186014 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-markdown-pdf-fork-polaris |
Malicious release: Malicious code in cassini-pyxis-proxima-isostasy (npm) MAL-2025-186015 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-pyxis-proxima-isostasy |
Malicious release: Malicious code in cassini-socketio-concurrently-forever (npm) MAL-2025-186016 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-socketio-concurrently-forever |
Malicious release: Malicious code in cassini-terser-prettier-mysql (npm) MAL-2025-186017 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-terser-prettier-mysql |
Malicious release: Malicious code in castor-andromeda-izar-config (npm) MAL-2025-186018 | Malicious | Not scored | 13 Nov, 2025 | npm castor-andromeda-izar-config |
Malicious release: Malicious code in castor-avior-nebula-heka (npm) MAL-2025-186019 | Malicious | Not scored | 13 Nov, 2025 | npm castor-avior-nebula-heka |
Malicious release: Malicious code in castor-callisto-miranda-quasar (npm) MAL-2025-186020 | Malicious | Not scored | 13 Nov, 2025 | npm castor-callisto-miranda-quasar |
Malicious release: Malicious code in castor-cosmology-planetology-toml (npm) MAL-2025-186021 | Malicious | Not scored | 13 Nov, 2025 | npm castor-cosmology-planetology-toml |
Malicious release: Malicious code in castor-ganymede-registry-blaze (npm) MAL-2025-186022 | Malicious | Not scored | 13 Nov, 2025 | npm castor-ganymede-registry-blaze |
Malicious release: Malicious code in castor-janus-interferometry-asteroid (npm) MAL-2025-186023 | Malicious | Not scored | 13 Nov, 2025 | npm castor-janus-interferometry-asteroid |
Malicious release: Malicious code in castor-magellan-halley-equinox (npm) MAL-2025-186024 | Malicious | Not scored | 13 Nov, 2025 | npm castor-magellan-halley-equinox |
Malicious release: Malicious code in castor-singularitarianism-parcel-perseus (npm) MAL-2025-186025 | Malicious | Not scored | 13 Nov, 2025 | npm castor-singularitarianism-parcel-perseus |
Malicious release: Malicious code in castor-warp-asthenosphere-apollo (npm) MAL-2025-186026 | Malicious | Not scored | 13 Nov, 2025 | npm castor-warp-asthenosphere-apollo |
Malicious release: Malicious code in cat-air-xi-slow-visualize (npm) MAL-2025-186027 | Malicious | Not scored | 13 Nov, 2025 | npm cat-air-xi-slow-visualize |
Malicious release: Malicious code in cat-big-code-star-encrypt (npm) MAL-2025-186028 | Malicious | Not scored | 13 Nov, 2025 | npm cat-big-code-star-encrypt |
Malicious release: Malicious code in cat-compile-analyze-deploy-cloud (npm) MAL-2025-186029 | Malicious | Not scored | 13 Nov, 2025 | npm cat-compile-analyze-deploy-cloud |
Malicious release: Malicious code in cat-encrypt-export-kappa-validate (npm) MAL-2025-186030 | Malicious | Not scored | 13 Nov, 2025 | npm cat-encrypt-export-kappa-validate |
Malicious release: Malicious code in cat-meta-stack-minify-try (npm) MAL-2025-186031 | Malicious | Not scored | 13 Nov, 2025 | npm cat-meta-stack-minify-try |
Malicious release: Malicious code in cat-minify-cold-reject-monitor (npm) MAL-2025-186032 | Malicious | Not scored | 13 Nov, 2025 | npm cat-minify-cold-reject-monitor |
Malicious release: Malicious code in cat-sudo-node-decrypt-analyze (npm) MAL-2025-186033 | Malicious | Not scored | 13 Nov, 2025 | npm cat-sudo-node-decrypt-analyze |
Malicious release: Malicious code in cat-void-bash-cache-bundle (npm) MAL-2025-186034 | Malicious | Not scored | 13 Nov, 2025 | npm cat-void-bash-cache-bundle |
Malicious release: Malicious code in catch-bash-mu-daemon-slow (npm) MAL-2025-186035 | Malicious | Not scored | 13 Nov, 2025 | npm catch-bash-mu-daemon-slow |
Malicious release: Malicious code in catch-bash-string-long-catch (npm) MAL-2025-186036 | Malicious | Not scored | 13 Nov, 2025 | npm catch-bash-string-long-catch |
Malicious release: Malicious code in catch-byte-decompress-cluster-assert (npm) MAL-2025-186037 | Malicious | Not scored | 13 Nov, 2025 | npm catch-byte-decompress-cluster-assert |
Malicious release: Malicious code in catch-daemon-mock-emulate-validate (npm) MAL-2025-186038 | Malicious | Not scored | 13 Nov, 2025 | npm catch-daemon-mock-emulate-validate |
Malicious release: Malicious code in catch-float-cluster-assert-load (npm) MAL-2025-186039 | Malicious | Not scored | 13 Nov, 2025 | npm catch-float-cluster-assert-load |
Malicious release: Malicious code in catch-stack-load-public-grep (npm) MAL-2025-186040 | Malicious | Not scored | 13 Nov, 2025 | npm catch-stack-load-public-grep |
Malicious release: Malicious code in celeste-archaeoastronomy-despina-vuepress (npm) MAL-2025-186041 | Malicious | Not scored | 13 Nov, 2025 | npm celeste-archaeoastronomy-despina-vuepress |
Malicious release: Malicious code in celeste-baryon-stop-nodejs (npm) MAL-2025-186042 | Malicious | Not scored | 13 Nov, 2025 | npm celeste-baryon-stop-nodejs |
Malicious release: Malicious code in celeste-pm2-xerxes-kuiperbelt (npm) MAL-2025-186043 | Malicious | Not scored | 13 Nov, 2025 | npm celeste-pm2-xerxes-kuiperbelt |
Malicious release: Malicious code in celeste-selenology-socketio-carpo (npm) MAL-2025-186044 | Malicious | Not scored | 13 Nov, 2025 | npm celeste-selenology-socketio-carpo |
Malicious release: Malicious code in centauri-cli-transport-selenium (npm) MAL-2025-186045 | Malicious | Not scored | 13 Nov, 2025 | npm centauri-cli-transport-selenium |
Malicious release: Malicious code in centauri-filament-private-on (npm) MAL-2025-186046 | Malicious | Not scored | 13 Nov, 2025 | npm centauri-filament-private-on |
Malicious release: Malicious code in centauri-lacerta-config-taurus (npm) MAL-2025-186047 | Malicious | Not scored | 13 Nov, 2025 | npm centauri-lacerta-config-taurus |
Malicious release: Malicious code in centauri-leda-playwright-cygnus (npm) MAL-2025-186048 | Malicious | Not scored | 13 Nov, 2025 | npm centauri-leda-playwright-cygnus |