Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in chalk-paleoclimatology-dependencies-parsec (npm) MAL-2025-186099 | Malicious | Not scored | 13 Nov, 2025 | npm chalk-paleoclimatology-dependencies-parsec |
Malicious release: Malicious code in chalk-paleontology-quasar-taurus (npm) MAL-2025-186100 | Malicious | Not scored | 13 Nov, 2025 | npm chalk-paleontology-quasar-taurus |
Malicious release: Malicious code in chalk-pulsar-native-xerxes (npm) MAL-2025-186101 | Malicious | Not scored | 13 Nov, 2025 | npm chalk-pulsar-native-xerxes |
Malicious release: Malicious code in chalk-resonance-triton-mineralogy (npm) MAL-2025-186102 | Malicious | Not scored | 13 Nov, 2025 | npm chalk-resonance-triton-mineralogy |
Malicious release: Malicious code in chalk-soap-eris-mini-css-extract-plugin (npm) MAL-2025-186103 | Malicious | Not scored | 13 Nov, 2025 | npm chalk-soap-eris-mini-css-extract-plugin |
Malicious release: Malicious code in chalk-steganography-europa-spawn (npm) MAL-2025-186104 | Malicious | Not scored | 13 Nov, 2025 | npm chalk-steganography-europa-spawn |
Malicious release: Malicious code in chalk-stop-indus-module (npm) MAL-2025-186105 | Malicious | Not scored | 13 Nov, 2025 | npm chalk-stop-indus-module |
Malicious release: Malicious code in chalk-supercluster-repository-morgan (npm) MAL-2025-186106 | Malicious | Not scored | 13 Nov, 2025 | npm chalk-supercluster-repository-morgan |
Malicious release: Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv (npm) MAL-2025-186107 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-archaeogenetics-mini-css-extract-plugin-dotenv |
Malicious release: Malicious code in changelog-borealis-resolvers-resonance (npm) MAL-2025-186108 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-borealis-resolvers-resonance |
Malicious release: Malicious code in changelog-graviton-hadron-panspermia (npm) MAL-2025-186109 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-graviton-hadron-panspermia |
Malicious release: Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin (npm) MAL-2025-186110 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-gridsome-perseus-css-minimizer-webpack-plugin |
Malicious release: Malicious code in changelog-hugo-fusion-tectonic (npm) MAL-2025-186111 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-hugo-fusion-tectonic |
Malicious release: Malicious code in changelog-middleware-koa-betelgeuse (npm) MAL-2025-186112 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-middleware-koa-betelgeuse |
Malicious release: Malicious code in changelog-multiverse-heliophysics-regulus (npm) MAL-2025-186113 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-multiverse-heliophysics-regulus |
Malicious release: Malicious code in changelog-polaris-dotenv-safe-phoebe (npm) MAL-2025-186114 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-polaris-dotenv-safe-phoebe |
Malicious release: Malicious code in changelog-prompts-europa-blazar (npm) MAL-2025-186115 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-prompts-europa-blazar |
Malicious release: Malicious code in changelog-supernova-mantle-hermes (npm) MAL-2025-186116 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-supernova-mantle-hermes |
Malicious release: Malicious code in changelog-tachyon-writable-pipe (npm) MAL-2025-186117 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-tachyon-writable-pipe |
Malicious release: Malicious code in changelog-unuk-antares-restart (npm) MAL-2025-186118 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-unuk-antares-restart |
Malicious release: Malicious code in char-alert-abstract-decrypt-test (npm) MAL-2025-186119 | Malicious | Not scored | 13 Nov, 2025 | npm char-alert-abstract-decrypt-test |
Malicious release: Malicious code in char-bundle-route-refactor-async (npm) MAL-2025-186120 | Malicious | Not scored | 13 Nov, 2025 | npm char-bundle-route-refactor-async |
Malicious release: Malicious code in char-cat-execute-eta-authenticate (npm) MAL-2025-186121 | Malicious | Not scored | 13 Nov, 2025 | npm char-cat-execute-eta-authenticate |
Malicious release: Malicious code in char-double-load-notify-gamma (npm) MAL-2025-186122 | Malicious | Not scored | 13 Nov, 2025 | npm char-double-load-notify-gamma |
Malicious release: Malicious code in char-hot-import-public-process (npm) MAL-2025-186123 | Malicious | Not scored | 13 Nov, 2025 | npm char-hot-import-public-process |
Malicious release: Malicious code in char-xml-xml-validate-validate (npm) MAL-2025-186124 | Malicious | Not scored | 13 Nov, 2025 | npm char-xml-xml-validate-validate |
Malicious release: Malicious code in chariklo-areology-changelog-arcturus (npm) MAL-2025-186125 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-areology-changelog-arcturus |
Malicious release: Malicious code in chariklo-babel-postgres-thuban (npm) MAL-2025-186126 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-babel-postgres-thuban |
Malicious release: Malicious code in chariklo-dysonswarm-yildun-adonis (npm) MAL-2025-186127 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-dysonswarm-yildun-adonis |
Malicious release: Malicious code in chariklo-library-public-local (npm) MAL-2025-186128 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-library-public-local |
Malicious release: Malicious code in chariklo-perseus-chalk-antares (npm) MAL-2025-186129 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-perseus-chalk-antares |
Malicious release: Malicious code in chariklo-sirius-relay-leda (npm) MAL-2025-186130 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-sirius-relay-leda |
Malicious release: Malicious code in charon-stream-fornax-dotenv (npm) MAL-2025-186131 | Malicious | Not scored | 13 Nov, 2025 | npm charon-stream-fornax-dotenv |
Malicious release: Malicious code in charon-transhumanism-zephyr-electron-builder (npm) MAL-2025-186132 | Malicious | Not scored | 13 Nov, 2025 | npm charon-transhumanism-zephyr-electron-builder |
Malicious release: Malicious code in chi-bad-deserialize-throw-static (npm) MAL-2025-186133 | Malicious | Not scored | 13 Nov, 2025 | npm chi-bad-deserialize-throw-static |
Malicious release: Malicious code in chi-cron-sudo-finally-visualize (npm) MAL-2025-186134 | Malicious | Not scored | 13 Nov, 2025 | npm chi-cron-sudo-finally-visualize |
Malicious release: Malicious code in chi-error-kappa-shell-error (npm) MAL-2025-186135 | Malicious | Not scored | 13 Nov, 2025 | npm chi-error-kappa-shell-error |
Malicious release: Malicious code in chi-iota-decompress-sed-emulate (npm) MAL-2025-186136 | Malicious | Not scored | 13 Nov, 2025 | npm chi-iota-decompress-sed-emulate |
Malicious release: Malicious code in chi-mu-socket-cold-small (npm) MAL-2025-186137 | Malicious | Not scored | 13 Nov, 2025 | npm chi-mu-socket-cold-small |
Malicious release: Malicious code in chi-omega-permission-analyze-warn (npm) MAL-2025-186138 | Malicious | Not scored | 13 Nov, 2025 | npm chi-omega-permission-analyze-warn |
Malicious release: Malicious code in chi-route-good-integer-grep (npm) MAL-2025-186139 | Malicious | Not scored | 13 Nov, 2025 | npm chi-route-good-integer-grep |
Malicious release: Malicious code in chi-short-export-assert-execute (npm) MAL-2025-186140 | Malicious | Not scored | 13 Nov, 2025 | npm chi-short-export-assert-execute |
Malicious release: Malicious code in child-process-blitz-spawn-wasat (npm) MAL-2025-186141 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-blitz-spawn-wasat |
Malicious release: Malicious code in child-process-charon-mui-on (npm) MAL-2025-186142 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-charon-mui-on |
Malicious release: Malicious code in child-process-concurrently-chakra-ui-node-sass (npm) MAL-2025-186143 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-concurrently-chakra-ui-node-sass |
Malicious release: Malicious code in child-process-eridanus-cypress-zephyr (npm) MAL-2025-186144 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-eridanus-cypress-zephyr |
Malicious release: Malicious code in child-process-loglevel-elektra-eleventy (npm) MAL-2025-186145 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-loglevel-elektra-eleventy |
Malicious release: Malicious code in child-process-stratigraphy-subduction-node-sass (npm) MAL-2025-186146 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-stratigraphy-subduction-node-sass |
Malicious release: Malicious code in child-process-xenon-avior-perseus (npm) MAL-2025-186147 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-xenon-avior-perseus |
Malicious release: Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog (npm) MAL-2025-186148 | Malicious | Not scored | 13 Nov, 2025 | npm chromedriver-hyperion-isostasy-cz-conventional-changelog |