Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in commitlint-config-angular-graphql-ursa-yakutsk (npm) MAL-2025-186249 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-config-angular-graphql-ursa-yakutsk |
Malicious release: Malicious code in commitlint-config-angular-hercules-express-yonder (npm) MAL-2025-186250 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-config-angular-hercules-express-yonder |
Malicious release: Malicious code in commitlint-config-angular-init-miranda-luna (npm) MAL-2025-186251 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-config-angular-init-miranda-luna |
Malicious release: Malicious code in commitlint-config-angular-nodejs-carpo-vortex (npm) MAL-2025-186252 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-config-angular-nodejs-carpo-vortex |
Malicious release: Malicious code in commitlint-config-angular-sadr-cluster-mira (npm) MAL-2025-186253 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-config-angular-sadr-cluster-mira |
Malicious release: Malicious code in commitlint-prosthetics-altair-magnetosphere (npm) MAL-2025-186254 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-prosthetics-altair-magnetosphere |
Malicious release: Malicious code in commitlint-publish-fornax-prettier-stylelint (npm) MAL-2025-186255 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-publish-fornax-prettier-stylelint |
Malicious release: Malicious code in commitlint-resolvers-procyon-pm2 (npm) MAL-2025-186256 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-resolvers-procyon-pm2 |
Malicious release: Malicious code in commitlint-slides-octans-resolvers (npm) MAL-2025-186257 | Malicious | Not scored | 13 Nov, 2025 | npm commitlint-slides-octans-resolvers |
Malicious release: Malicious code in compile-catch-gamma-encode-resolve (npm) MAL-2025-186258 | Malicious | Not scored | 13 Nov, 2025 | npm compile-catch-gamma-encode-resolve |
Malicious release: Malicious code in compile-gamma-wind-code-deserialize (npm) MAL-2025-186259 | Malicious | Not scored | 13 Nov, 2025 | npm compile-gamma-wind-code-deserialize |
Malicious release: Malicious code in compile-validate-sandbox-node-async (npm) MAL-2025-186260 | Malicious | Not scored | 13 Nov, 2025 | npm compile-validate-sandbox-node-async |
Malicious release: Malicious code in compile-xi-small-star-decompress (npm) MAL-2025-186261 | Malicious | Not scored | 13 Nov, 2025 | npm compile-xi-small-star-decompress |
Malicious release: Malicious code in compress-async-rho-boolean-assert (npm) MAL-2025-186262 | Malicious | Not scored | 13 Nov, 2025 | npm compress-async-rho-boolean-assert |
Malicious release: Malicious code in compress-tau-enum-book-serialize (npm) MAL-2025-186263 | Malicious | Not scored | 13 Nov, 2025 | npm compress-tau-enum-book-serialize |
Malicious release: Malicious code in compress-water-cluster-slow-cat (npm) MAL-2025-186264 | Malicious | Not scored | 13 Nov, 2025 | npm compress-water-cluster-slow-cat |
Malicious release: Malicious code in concurrently-configstore-lyra-perseus (npm) MAL-2025-186265 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-configstore-lyra-perseus |
Malicious release: Malicious code in concurrently-fork-blazar-helios (npm) MAL-2025-186266 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-fork-blazar-helios |
Malicious release: Malicious code in concurrently-grus-vuepress-zenith (npm) MAL-2025-186267 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-grus-vuepress-zenith |
Malicious release: Malicious code in concurrently-hawkingradiation-tailwindcss-janus (npm) MAL-2025-186268 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-hawkingradiation-tailwindcss-janus |
Malicious release: Malicious code in concurrently-janus-equinox-spinner (npm) MAL-2025-186269 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-janus-equinox-spinner |
Malicious release: Malicious code in concurrently-janus-spinner-palynology (npm) MAL-2025-186270 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-janus-spinner-palynology |
Malicious release: Malicious code in concurrently-scripts-plutology-nightmare (npm) MAL-2025-186271 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-scripts-plutology-nightmare |
Malicious release: Malicious code in concurrently-ultra-protractor-paleoceanography (npm) MAL-2025-186272 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-ultra-protractor-paleoceanography |
Malicious release: Malicious code in config-cross-env-nova-bunyan (npm) MAL-2025-186273 | Malicious | Not scored | 13 Nov, 2025 | npm config-cross-env-nova-bunyan |
Malicious release: Malicious code in config-dactyl-foundation-sirius (npm) MAL-2025-186274 | Malicious | Not scored | 13 Nov, 2025 | npm config-dactyl-foundation-sirius |
Malicious release: Malicious code in config-darkenergy-heliophysics-quark (npm) MAL-2025-186275 | Malicious | Not scored | 13 Nov, 2025 | npm config-darkenergy-heliophysics-quark |
Malicious release: Malicious code in config-elara-leda-nucleosynthesis (npm) MAL-2025-186276 | Malicious | Not scored | 13 Nov, 2025 | npm config-elara-leda-nucleosynthesis |
Malicious release: Malicious code in config-event-install-lacerta (npm) MAL-2025-186277 | Malicious | Not scored | 13 Nov, 2025 | npm config-event-install-lacerta |
Malicious release: Malicious code in config-ophiuchus-levels-version (npm) MAL-2025-186278 | Malicious | Not scored | 13 Nov, 2025 | npm config-ophiuchus-levels-version |
Malicious release: Malicious code in config-pipe-promise-start (npm) MAL-2025-186279 | Malicious | Not scored | 13 Nov, 2025 | npm config-pipe-promise-start |
Malicious release: Malicious code in config-regulus-auth-ophiuchus (npm) MAL-2025-186280 | Malicious | Not scored | 13 Nov, 2025 | npm config-regulus-auth-ophiuchus |
Malicious release: Malicious code in config-xml-sirius-config (npm) MAL-2025-186281 | Malicious | Not scored | 13 Nov, 2025 | npm config-xml-sirius-config |
Malicious release: Malicious code in configstore-centaurus-writable-express (npm) MAL-2025-186282 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-centaurus-writable-express |
Malicious release: Malicious code in configstore-eslint-config-celeste-archaeometry (npm) MAL-2025-186283 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-eslint-config-celeste-archaeometry |
Malicious release: Malicious code in configstore-hermes-development-update (npm) MAL-2025-186284 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-hermes-development-update |
Malicious release: Malicious code in configstore-jabbah-koa-public (npm) MAL-2025-186285 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-jabbah-koa-public |
Malicious release: Malicious code in configstore-mensa-airbnb-quark (npm) MAL-2025-186286 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-mensa-airbnb-quark |
Malicious release: Malicious code in configstore-mongoose-interferometry-terser-webpack-plugin (npm) MAL-2025-186287 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-mongoose-interferometry-terser-webpack-plugin |
Malicious release: Malicious code in configstore-quark-sync-callback (npm) MAL-2025-186288 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-quark-sync-callback |
Malicious release: Malicious code in container-async-awk-zeta-runtime (npm) MAL-2025-186289 | Malicious | Not scored | 13 Nov, 2025 | npm container-async-awk-zeta-runtime |
Malicious release: Malicious code in container-bundle-wind-private-resolve (npm) MAL-2025-186290 | Malicious | Not scored | 13 Nov, 2025 | npm container-bundle-wind-private-resolve |
Malicious release: Malicious code in container-encrypt-kappa-virtualize-old (npm) MAL-2025-186291 | Malicious | Not scored | 13 Nov, 2025 | npm container-encrypt-kappa-virtualize-old |
Malicious release: Malicious code in container-error-sanitize-authenticate-sigma (npm) MAL-2025-186292 | Malicious | Not scored | 13 Nov, 2025 | npm container-error-sanitize-authenticate-sigma |
Malicious release: Malicious code in container-tree-signal-notify-permission (npm) MAL-2025-186293 | Malicious | Not scored | 13 Nov, 2025 | npm container-tree-signal-notify-permission |
Malicious release: Malicious code in container-void-virtualize-transpile-try (npm) MAL-2025-186294 | Malicious | Not scored | 13 Nov, 2025 | npm container-void-virtualize-transpile-try |
Malicious release: Malicious code in convict-axios-cosmogenic-miranda (npm) MAL-2025-186295 | Malicious | Not scored | 13 Nov, 2025 | npm convict-axios-cosmogenic-miranda |
Malicious release: Malicious code in convict-miranda-deimos-astrochemistry (npm) MAL-2025-186296 | Malicious | Not scored | 13 Nov, 2025 | npm convict-miranda-deimos-astrochemistry |
Malicious release: Malicious code in convict-private-cors-superagent (npm) MAL-2025-186297 | Malicious | Not scored | 13 Nov, 2025 | npm convict-private-cors-superagent |
Malicious release: Malicious code in convict-quantum-hermes-enif (npm) MAL-2025-186298 | Malicious | Not scored | 13 Nov, 2025 | npm convict-quantum-hermes-enif |