Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in convict-spawn-gravitationalwave-stream (npm) MAL-2025-186299 | Malicious | Not scored | 13 Nov, 2025 | npm convict-spawn-gravitationalwave-stream |
Malicious release: Malicious code in convict-thuban-blackhole-chromedriver (npm) MAL-2025-186300 | Malicious | Not scored | 13 Nov, 2025 | npm convict-thuban-blackhole-chromedriver |
Malicious release: Malicious code in convict-ultra-paleoceanography-carpo (npm) MAL-2025-186301 | Malicious | Not scored | 13 Nov, 2025 | npm convict-ultra-paleoceanography-carpo |
Malicious release: Malicious code in convict-writable-webpack-cosmogenic (npm) MAL-2025-186302 | Malicious | Not scored | 13 Nov, 2025 | npm convict-writable-webpack-cosmogenic |
Malicious release: Malicious code in cordelia-async-chariklo-farout (npm) MAL-2025-186303 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-async-chariklo-farout |
Malicious release: Malicious code in cordelia-babel-on-proxima (npm) MAL-2025-186304 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-babel-on-proxima |
Malicious release: Malicious code in cordelia-cors-lyra-accretion (npm) MAL-2025-186305 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-cors-lyra-accretion |
Malicious release: Malicious code in cordelia-dione-hyperion-superposition (npm) MAL-2025-186306 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-dione-hyperion-superposition |
Malicious release: Malicious code in cordelia-indus-cors-dotenv-safe (npm) MAL-2025-186307 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-indus-cors-dotenv-safe |
Malicious release: Malicious code in cordelia-solis-markdown-xerxes (npm) MAL-2025-186308 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-solis-markdown-xerxes |
Malicious release: Malicious code in cordelia-websockets-yakutsk-quark (npm) MAL-2025-186309 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-websockets-yakutsk-quark |
Malicious release: Malicious code in cordelia-zenith-ganymede-mutation (npm) MAL-2025-186310 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-zenith-ganymede-mutation |
Malicious release: Malicious code in coronalmassejection-asthenosphere-astrobiology-cassini (npm) MAL-2025-186311 | Malicious | Not scored | 13 Nov, 2025 | npm coronalmassejection-asthenosphere-astrobiology-cassini |
Malicious release: Malicious code in coronalmassejection-express-stream-cryonics (npm) MAL-2025-186312 | Malicious | Not scored | 13 Nov, 2025 | npm coronalmassejection-express-stream-cryonics |
Malicious release: Malicious code in coronalmassejection-holography-dorado-command (npm) MAL-2025-186313 | Malicious | Not scored | 13 Nov, 2025 | npm coronalmassejection-holography-dorado-command |
Malicious release: Malicious code in coronalmassejection-sirius-morgan-process (npm) MAL-2025-186314 | Malicious | Not scored | 13 Nov, 2025 | npm coronalmassejection-sirius-morgan-process |
Malicious release: Malicious code in coronalmassejection-terser-zooarchaeology-telesto (npm) MAL-2025-186315 | Malicious | Not scored | 13 Nov, 2025 | npm coronalmassejection-terser-zooarchaeology-telesto |
Malicious release: Malicious code in cors-centaurus-electron-builder-galaxy (npm) MAL-2025-186316 | Malicious | Not scored | 13 Nov, 2025 | npm cors-centaurus-electron-builder-galaxy |
Malicious release: Malicious code in cors-google-mocha-prettier (npm) MAL-2025-186317 | Malicious | Not scored | 13 Nov, 2025 | npm cors-google-mocha-prettier |
Malicious release: Malicious code in cors-relay-mini-css-extract-plugin-winston (npm) MAL-2025-186318 | Malicious | Not scored | 13 Nov, 2025 | npm cors-relay-mini-css-extract-plugin-winston |
Malicious release: Malicious code in cors-standard-epimetheus-telesto (npm) MAL-2025-186319 | Malicious | Not scored | 13 Nov, 2025 | npm cors-standard-epimetheus-telesto |
Malicious release: Malicious code in cors-warp-farout-testcafe (npm) MAL-2025-186320 | Malicious | Not scored | 13 Nov, 2025 | npm cors-warp-farout-testcafe |
Malicious release: Malicious code in cors-zenobia-dagda-lint (npm) MAL-2025-186321 | Malicious | Not scored | 13 Nov, 2025 | npm cors-zenobia-dagda-lint |
Malicious release: Malicious code in corvus-biohacking-helmet-pm2 (npm) MAL-2025-186322 | Malicious | Not scored | 13 Nov, 2025 | npm corvus-biohacking-helmet-pm2 |
Malicious release: Malicious code in corvus-darkmatter-titan-version (npm) MAL-2025-186323 | Malicious | Not scored | 13 Nov, 2025 | npm corvus-darkmatter-titan-version |
Malicious release: Malicious code in corvus-javascript-charon-semantic-ui (npm) MAL-2025-186324 | Malicious | Not scored | 13 Nov, 2025 | npm corvus-javascript-charon-semantic-ui |
Malicious release: Malicious code in corvus-phylogenetics-metabolomics-puppeteer (npm) MAL-2025-186325 | Malicious | Not scored | 13 Nov, 2025 | npm corvus-phylogenetics-metabolomics-puppeteer |
Malicious release: Malicious code in corvus-vuepress-concurrently-elara (npm) MAL-2025-186326 | Malicious | Not scored | 13 Nov, 2025 | npm corvus-vuepress-concurrently-elara |
Malicious release: Malicious code in cosmiconfig-biosignature-vulcan-pipe (npm) MAL-2025-186327 | Malicious | Not scored | 13 Nov, 2025 | npm cosmiconfig-biosignature-vulcan-pipe |
Malicious release: Malicious code in cosmiconfig-deimos-kaus-hyperion (npm) MAL-2025-186328 | Malicious | Not scored | 13 Nov, 2025 | npm cosmiconfig-deimos-kaus-hyperion |
Malicious release: Malicious code in cosmiconfig-fermiparadox-parsec-forever (npm) MAL-2025-186329 | Malicious | Not scored | 13 Nov, 2025 | npm cosmiconfig-fermiparadox-parsec-forever |
Malicious release: Malicious code in cosmiconfig-gatsby-janus-slides (npm) MAL-2025-186330 | Malicious | Not scored | 13 Nov, 2025 | npm cosmiconfig-gatsby-janus-slides |
Malicious release: Malicious code in cosmiconfig-perseus-redgiant-apollo (npm) MAL-2025-186331 | Malicious | Not scored | 13 Nov, 2025 | npm cosmiconfig-perseus-redgiant-apollo |
Malicious release: Malicious code in cosmiconfig-xml-rehype-webpack (npm) MAL-2025-186332 | Malicious | Not scored | 13 Nov, 2025 | npm cosmiconfig-xml-rehype-webpack |
Malicious release: Malicious code in cosmicray-andromeda-registry-npm (npm) MAL-2025-186333 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicray-andromeda-registry-npm |
Malicious release: Malicious code in cosmicray-draco-interferometry-heka (npm) MAL-2025-186334 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicray-draco-interferometry-heka |
Malicious release: Malicious code in cosmicray-foundation-nconf-plutology (npm) MAL-2025-186335 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicray-foundation-nconf-plutology |
Malicious release: Malicious code in cosmicray-mechatronics-selenium-tailwindcss (npm) MAL-2025-186336 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicray-mechatronics-selenium-tailwindcss |
Malicious release: Malicious code in cosmicray-nova-regulus-eleventy (npm) MAL-2025-186337 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicray-nova-regulus-eleventy |
Malicious release: Malicious code in cosmicray-ursa-helmet-deneb (npm) MAL-2025-186338 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicray-ursa-helmet-deneb |
Malicious release: Malicious code in cosmicsilence-quasar-vulcan-gammarayburst (npm) MAL-2025-186339 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicsilence-quasar-vulcan-gammarayburst |
Malicious release: Malicious code in cosmicsilence-uranology-io-solis (npm) MAL-2025-186340 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicsilence-uranology-io-solis |
Malicious release: Malicious code in cosmicweb-antares-lithosphere-phoenix (npm) MAL-2025-186341 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicweb-antares-lithosphere-phoenix |
Malicious release: Malicious code in cosmicweb-leda-sadr-reveal-md (npm) MAL-2025-186342 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicweb-leda-sadr-reveal-md |
Malicious release: Malicious code in cosmicweb-miranda-xerxes-uglify-js (npm) MAL-2025-186343 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicweb-miranda-xerxes-uglify-js |
Malicious release: Malicious code in cosmicweb-sedimentology-ignite-library (npm) MAL-2025-186344 | Malicious | Not scored | 13 Nov, 2025 | npm cosmicweb-sedimentology-ignite-library |
Malicious release: Malicious code in cosmochemistry-gemini-release-it-neuromorphic (npm) MAL-2025-186345 | Malicious | Not scored | 13 Nov, 2025 | npm cosmochemistry-gemini-release-it-neuromorphic |
Malicious release: Malicious code in cosmochemistry-lacerta-magnetosphere-reveal-md (npm) MAL-2025-186346 | Malicious | Not scored | 13 Nov, 2025 | npm cosmochemistry-lacerta-magnetosphere-reveal-md |
Malicious release: Malicious code in cosmochemistry-less-enceladus-eigenstate (npm) MAL-2025-186347 | Malicious | Not scored | 13 Nov, 2025 | npm cosmochemistry-less-enceladus-eigenstate |
Malicious release: Malicious code in cosmochemistry-lynx-ceres-europa (npm) MAL-2025-186348 | Malicious | Not scored | 13 Nov, 2025 | npm cosmochemistry-lynx-ceres-europa |