Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cosmochemistry-transport-primatology-xenos (npm) MAL-2025-186349 | Malicious | Not scored | 13 Nov, 2025 | npm cosmochemistry-transport-primatology-xenos |
Malicious release: Malicious code in cosmogenic-astroinformatics-mesosphere-soap (npm) MAL-2025-186350 | Malicious | Not scored | 13 Nov, 2025 | npm cosmogenic-astroinformatics-mesosphere-soap |
Malicious release: Malicious code in cosmogenic-genomics-scripts-cache (npm) MAL-2025-186351 | Malicious | Not scored | 13 Nov, 2025 | npm cosmogenic-genomics-scripts-cache |
Malicious release: Malicious code in cosmogenic-polaris-helios-atlas (npm) MAL-2025-186352 | Malicious | Not scored | 13 Nov, 2025 | npm cosmogenic-polaris-helios-atlas |
Malicious release: Malicious code in cosmogenic-spinner-andromeda-quasarjet (npm) MAL-2025-186353 | Malicious | Not scored | 13 Nov, 2025 | npm cosmogenic-spinner-andromeda-quasarjet |
Malicious release: Malicious code in cosmology-geodynamo-blaze-perturbation (npm) MAL-2025-186354 | Malicious | Not scored | 13 Nov, 2025 | npm cosmology-geodynamo-blaze-perturbation |
Malicious release: Malicious code in cosmology-levels-terser-iota (npm) MAL-2025-186355 | Malicious | Not scored | 13 Nov, 2025 | npm cosmology-levels-terser-iota |
Malicious release: Malicious code in cosmology-schema-morgan-canopus (npm) MAL-2025-186356 | Malicious | Not scored | 13 Nov, 2025 | npm cosmology-schema-morgan-canopus |
Malicious release: Malicious code in cosmos-centaurus-charon-tool (npm) MAL-2025-186357 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-centaurus-charon-tool |
Malicious release: Malicious code in cosmos-concurrently-uninstall-jest (npm) MAL-2025-186358 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-concurrently-uninstall-jest |
Malicious release: Malicious code in cosmos-coronalmassejection-remark-arcturus (npm) MAL-2025-186359 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-coronalmassejection-remark-arcturus |
Malicious release: Malicious code in cosmos-framework-gacrux-pm2 (npm) MAL-2025-186360 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-framework-gacrux-pm2 |
Malicious release: Malicious code in cosmos-geochemistry-sqlite-lint-staged (npm) MAL-2025-186361 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-geochemistry-sqlite-lint-staged |
Malicious release: Malicious code in cosmos-public-warp-planckscale (npm) MAL-2025-186362 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-public-warp-planckscale |
Malicious release: Malicious code in cosmos-void-procyon-nanotechnology (npm) MAL-2025-186363 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-void-procyon-nanotechnology |
Malicious release: Malicious code in cosmos-volcanology-cassini-nova (npm) MAL-2025-186364 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-volcanology-cassini-nova |
Malicious release: Malicious code in cosmos-yonder-grunt-nashira (npm) MAL-2025-186365 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-yonder-grunt-nashira |
Malicious release: Malicious code in cressida-cache-iota-antares (npm) MAL-2025-186366 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-cache-iota-antares |
Malicious release: Malicious code in cressida-cybernetics-rollup-plugin-node-sass (npm) MAL-2025-186367 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-cybernetics-rollup-plugin-node-sass |
Malicious release: Malicious code in cressida-indus-epimetheus-borealis (npm) MAL-2025-186368 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-indus-epimetheus-borealis |
Malicious release: Malicious code in cressida-jwt-loglevel-fetch (npm) MAL-2025-186369 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-jwt-loglevel-fetch |
Malicious release: Malicious code in cressida-prettier-plugin-markdown-pulsar-stream (npm) MAL-2025-186370 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-prettier-plugin-markdown-pulsar-stream |
Malicious release: Malicious code in cressida-vortex-lint-staged-blueshift (npm) MAL-2025-186371 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-vortex-lint-staged-blueshift |
Malicious release: Malicious code in cressida-yakutsk-zephyr-rollup (npm) MAL-2025-186372 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-yakutsk-zephyr-rollup |
Malicious release: Malicious code in cron-kappa-bash-serialize-beta (npm) MAL-2025-186373 | Malicious | Not scored | 13 Nov, 2025 | npm cron-kappa-bash-serialize-beta |
Malicious release: Malicious code in cron-optimize-thread-cat-compile (npm) MAL-2025-186374 | Malicious | Not scored | 13 Nov, 2025 | npm cron-optimize-thread-cat-compile |
Malicious release: Malicious code in cron-rho-analyze-socket-air (npm) MAL-2025-186375 | Malicious | Not scored | 13 Nov, 2025 | npm cron-rho-analyze-socket-air |
Malicious release: Malicious code in cron-tree-query-unix-report (npm) MAL-2025-186376 | Malicious | Not scored | 13 Nov, 2025 | npm cron-tree-query-unix-report |
Malicious release: Malicious code in cross-env-atlas-non-blocking-eslint (npm) MAL-2025-186377 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-atlas-non-blocking-eslint |
Malicious release: Malicious code in cross-env-atlas-thuban-enif (npm) MAL-2025-186378 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-atlas-thuban-enif |
Malicious release: Malicious code in cross-env-cross-env-photon-superposition (npm) MAL-2025-186379 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-cross-env-photon-superposition |
Malicious release: Malicious code in cross-env-cybernetics-juno-iota (npm) MAL-2025-186380 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-cybernetics-juno-iota |
Malicious release: Malicious code in cross-env-dorado-eslint-config-zephyr (npm) MAL-2025-186381 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-dorado-eslint-config-zephyr |
Malicious release: Malicious code in cross-env-flare-hyperion-meissa (npm) MAL-2025-186382 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-flare-hyperion-meissa |
Malicious release: Malicious code in cross-env-geochemistry-global-juno (npm) MAL-2025-186383 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-geochemistry-global-juno |
Malicious release: Malicious code in cross-env-native-centaurus-dynamo (npm) MAL-2025-186384 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-native-centaurus-dynamo |
Malicious release: Malicious code in cross-env-package-rimraf-antares (npm) MAL-2025-186385 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-package-rimraf-antares |
Malicious release: Malicious code in cross-env-singularity-europa-paleobotany (npm) MAL-2025-186386 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-singularity-europa-paleobotany |
Malicious release: Malicious code in cross-env-vega-native-blazar (npm) MAL-2025-186387 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-vega-native-blazar |
Malicious release: Malicious code in crust-mui-development-norma (npm) MAL-2025-186388 | Malicious | Not scored | 13 Nov, 2025 | npm crust-mui-development-norma |
Malicious release: Malicious code in crust-proxima-typeorm-duplex (npm) MAL-2025-186389 | Malicious | Not scored | 13 Nov, 2025 | npm crust-proxima-typeorm-duplex |
Malicious release: Malicious code in crust-thuban-archaeogenetics-callback (npm) MAL-2025-186390 | Malicious | Not scored | 13 Nov, 2025 | npm crust-thuban-archaeogenetics-callback |
Malicious release: Malicious code in cryonics-blazar-nightwatch-inflation (npm) MAL-2025-186391 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-blazar-nightwatch-inflation |
Malicious release: Malicious code in cryonics-convict-tectonophysics-interstellarmedium (npm) MAL-2025-186392 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-convict-tectonophysics-interstellarmedium |
Malicious release: Malicious code in cryonics-cypress-stream-lithosphere (npm) MAL-2025-186393 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-cypress-stream-lithosphere |
Malicious release: Malicious code in cryonics-jest-tachyon-hydra (npm) MAL-2025-186394 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-jest-tachyon-hydra |
Malicious release: Malicious code in cryonics-magellan-bionics-tardigrade (npm) MAL-2025-186395 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-magellan-bionics-tardigrade |
Malicious release: Malicious code in cryonics-meteor-spawn-halley (npm) MAL-2025-186396 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-meteor-spawn-halley |
Malicious release: Malicious code in cryonics-neutronstar-webdriver-mocha-whitedwarf (npm) MAL-2025-186397 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-neutronstar-webdriver-mocha-whitedwarf |
Malicious release: Malicious code in cryonics-publish-dactyl-pyxis (npm) MAL-2025-186398 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-publish-dactyl-pyxis |