Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cold-hot-beta-log-daemon (npm) MAL-2025-186199 | Malicious | Not scored | 13 Nov, 2025 | npm cold-hot-beta-log-daemon |
Malicious release: Malicious code in cold-mock-daemon-hash-thread (npm) MAL-2025-186200 | Malicious | Not scored | 13 Nov, 2025 | npm cold-mock-daemon-hash-thread |
Malicious release: Malicious code in cold-old-monitor-zeta-process (npm) MAL-2025-186201 | Malicious | Not scored | 13 Nov, 2025 | npm cold-old-monitor-zeta-process |
Malicious release: Malicious code in cold-phi-cloud-cluster-private (npm) MAL-2025-186202 | Malicious | Not scored | 13 Nov, 2025 | npm cold-phi-cloud-cluster-private |
Malicious release: Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm) MAL-2025-186203 | Malicious | Not scored | 13 Nov, 2025 | npm colors-eventhoriz-react-bootstrap-zooarchaeology |
Malicious release: Malicious code in colors-gravity-cosmiconfig-zephyr (npm) MAL-2025-186204 | Malicious | Not scored | 13 Nov, 2025 | npm colors-gravity-cosmiconfig-zephyr |
Malicious release: Malicious code in colors-nightwatch-antimatter-postcss-loader (npm) MAL-2025-186205 | Malicious | Not scored | 13 Nov, 2025 | npm colors-nightwatch-antimatter-postcss-loader |
Malicious release: Malicious code in colors-paleomagnetism-global-unuk (npm) MAL-2025-186206 | Malicious | Not scored | 13 Nov, 2025 | npm colors-paleomagnetism-global-unuk |
Malicious release: Malicious code in colors-request-xo-xerxes (npm) MAL-2025-186207 | Malicious | Not scored | 13 Nov, 2025 | npm colors-request-xo-xerxes |
Malicious release: Malicious code in colors-rigel-bellatrix-pyxis (npm) MAL-2025-186208 | Malicious | Not scored | 13 Nov, 2025 | npm colors-rigel-bellatrix-pyxis |
Malicious release: Malicious code in colors-style-loader-bellatrix-tool (npm) MAL-2025-186209 | Malicious | Not scored | 13 Nov, 2025 | npm colors-style-loader-bellatrix-tool |
Malicious release: Malicious code in colors-superflare-rigel-quark (npm) MAL-2025-186210 | Malicious | Not scored | 13 Nov, 2025 | npm colors-superflare-rigel-quark |
Malicious release: Malicious code in comet-areology-exobiology-perturbation (npm) MAL-2025-186211 | Malicious | Not scored | 13 Nov, 2025 | npm comet-areology-exobiology-perturbation |
Malicious release: Malicious code in comet-auth-html-webpack-plugin-request (npm) MAL-2025-186212 | Malicious | Not scored | 13 Nov, 2025 | npm comet-auth-html-webpack-plugin-request |
Malicious release: Malicious code in comet-axios-chakra-ui-ora (npm) MAL-2025-186213 | Malicious | Not scored | 13 Nov, 2025 | npm comet-axios-chakra-ui-ora |
Malicious release: Malicious code in comet-cassini-stratigraphy-mensa (npm) MAL-2025-186214 | Malicious | Not scored | 13 Nov, 2025 | npm comet-cassini-stratigraphy-mensa |
Malicious release: Malicious code in comet-exoplanet-oortcloud-cosmicsilence (npm) MAL-2025-186215 | Malicious | Not scored | 13 Nov, 2025 | npm comet-exoplanet-oortcloud-cosmicsilence |
Malicious release: Malicious code in comet-mutation-commitlint-csrf (npm) MAL-2025-186216 | Malicious | Not scored | 13 Nov, 2025 | npm comet-mutation-commitlint-csrf |
Malicious release: Malicious code in comet-norma-semantic-release-rest (npm) MAL-2025-186217 | Malicious | Not scored | 13 Nov, 2025 | npm comet-norma-semantic-release-rest |
Malicious release: Malicious code in comet-oauth-airbnb-tethys (npm) MAL-2025-186218 | Malicious | Not scored | 13 Nov, 2025 | npm comet-oauth-airbnb-tethys |
Malicious release: Malicious code in comet-orbit-umbriel-thermochronology (npm) MAL-2025-186219 | Malicious | Not scored | 13 Nov, 2025 | npm comet-orbit-umbriel-thermochronology |
Malicious release: Malicious code in comet-perseus-andromeda-terraforming (npm) MAL-2025-186220 | Malicious | Not scored | 13 Nov, 2025 | npm comet-perseus-andromeda-terraforming |
Malicious release: Malicious code in comet-perturbation-testcafe-astrobiology (npm) MAL-2025-186221 | Malicious | Not scored | 13 Nov, 2025 | npm comet-perturbation-testcafe-astrobiology |
Malicious release: Malicious code in comet-private-crust-andromeda (npm) MAL-2025-186222 | Malicious | Not scored | 13 Nov, 2025 | npm comet-private-crust-andromeda |
Malicious release: Malicious code in comet-publish-palynology-farout (npm) MAL-2025-186223 | Malicious | Not scored | 13 Nov, 2025 | npm comet-publish-palynology-farout |
Malicious release: Malicious code in comet-pyxis-cosmochemistry-library (npm) MAL-2025-186224 | Malicious | Not scored | 13 Nov, 2025 | npm comet-pyxis-cosmochemistry-library |
Malicious release: Malicious code in comet-rehype-transport-entanglement (npm) MAL-2025-186225 | Malicious | Not scored | 13 Nov, 2025 | npm comet-rehype-transport-entanglement |
Malicious release: Malicious code in comet-xanthus-cosmos-protoplanetarydisk (npm) MAL-2025-186226 | Malicious | Not scored | 13 Nov, 2025 | npm comet-xanthus-cosmos-protoplanetarydisk |
Malicious release: Malicious code in command-axios-asteroid-carina (npm) MAL-2025-186227 | Malicious | Not scored | 13 Nov, 2025 | npm command-axios-asteroid-carina |
Malicious release: Malicious code in command-blazar-node-config-phylogenetics (npm) MAL-2025-186228 | Malicious | Not scored | 13 Nov, 2025 | npm command-blazar-node-config-phylogenetics |
Malicious release: Malicious code in command-bootstrap-exoplanetology-paleontology (npm) MAL-2025-186229 | Malicious | Not scored | 13 Nov, 2025 | npm command-bootstrap-exoplanetology-paleontology |
Malicious release: Malicious code in command-celeste-resonance-hyperion (npm) MAL-2025-186230 | Malicious | Not scored | 13 Nov, 2025 | npm command-celeste-resonance-hyperion |
Malicious release: Malicious code in command-dotenv-betelgeuse-neutronstar (npm) MAL-2025-186231 | Malicious | Not scored | 13 Nov, 2025 | npm command-dotenv-betelgeuse-neutronstar |
Malicious release: Malicious code in command-dotenv-safe-oberon-lint-staged (npm) MAL-2025-186232 | Malicious | Not scored | 13 Nov, 2025 | npm command-dotenv-safe-oberon-lint-staged |
Malicious release: Malicious code in command-leda-fetch-delphinus (npm) MAL-2025-186233 | Malicious | Not scored | 13 Nov, 2025 | npm command-leda-fetch-delphinus |
Malicious release: Malicious code in command-prettier-stylelint-server-schema (npm) MAL-2025-186234 | Malicious | Not scored | 13 Nov, 2025 | npm command-prettier-stylelint-server-schema |
Malicious release: Malicious code in command-pulsar-atlas-on (npm) MAL-2025-186235 | Malicious | Not scored | 13 Nov, 2025 | npm command-pulsar-atlas-on |
Malicious release: Malicious code in command-react-bootstrap-neuromorphic-magellan (npm) MAL-2025-186236 | Malicious | Not scored | 13 Nov, 2025 | npm command-react-bootstrap-neuromorphic-magellan |
Malicious release: Malicious code in command-xo-module-antd (npm) MAL-2025-186237 | Malicious | Not scored | 13 Nov, 2025 | npm command-xo-module-antd |
Malicious release: Malicious code in commitizen-antares-magellan-saturnology (npm) MAL-2025-186238 | Malicious | Not scored | 13 Nov, 2025 | npm commitizen-antares-magellan-saturnology |
Malicious release: Malicious code in commitizen-chromedriver-redis-polaris (npm) MAL-2025-186239 | Malicious | Not scored | 13 Nov, 2025 | npm commitizen-chromedriver-redis-polaris |
Malicious release: Malicious code in commitizen-eclipse-sadr-chariklo (npm) MAL-2025-186240 | Malicious | Not scored | 13 Nov, 2025 | npm commitizen-eclipse-sadr-chariklo |
Malicious release: Malicious code in commitizen-markdown-luminescence-meteor (npm) MAL-2025-186241 | Malicious | Not scored | 13 Nov, 2025 | npm commitizen-markdown-luminescence-meteor |
Malicious release: Malicious code in commitizen-playwright-selenium-publish (npm) MAL-2025-186242 | Malicious | Not scored | 13 Nov, 2025 | npm commitizen-playwright-selenium-publish |
Malicious release: Malicious code in commitizen-radioastronomy-steganography-grunt (npm) MAL-2025-186243 | Malicious | Not scored | 13 Nov, 2025 | npm commitizen-radioastronomy-steganography-grunt |
Malicious release: Malicious code in commitizen-singularitarianism-framework-wavefunction (npm) MAL-2025-186244 | Malicious | Not scored | 13 Nov, 2025 | npm commitizen-singularitarianism-framework-wavefunction |
Malicious release: Malicious code in commitlint-betelgeuse-yaml-indus (npm) MAL-2025-186245 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-betelgeuse-yaml-indus |
Malicious release: Malicious code in commitlint-chalk-eclipse-init (npm) MAL-2025-186246 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-chalk-eclipse-init |
Malicious release: Malicious code in commitlint-chalk-neptune-auriga (npm) MAL-2025-186247 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-chalk-neptune-auriga |
Malicious release: Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google (npm) MAL-2025-186248 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-config-angular-forever-dotenv-parse-variables-google |