Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cryonics-publish-dactyl-pyxis (npm) MAL-2025-186398 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-publish-dactyl-pyxis |
Malicious release: Malicious code in cryovolcano-grus-ini-proxima (npm) MAL-2025-186399 | Malicious | Not scored | 13 Nov, 2025 | npm cryovolcano-grus-ini-proxima |
Malicious release: Malicious code in cryovolcano-miranda-blueshift-rimraf (npm) MAL-2025-186400 | Malicious | Not scored | 13 Nov, 2025 | npm cryovolcano-miranda-blueshift-rimraf |
Malicious release: Malicious code in cryovolcano-transhumanism-scripts-janus (npm) MAL-2025-186401 | Malicious | Not scored | 13 Nov, 2025 | npm cryovolcano-transhumanism-scripts-janus |
Malicious release: Malicious code in cryptography-biohacking-xml-graphql (npm) MAL-2025-186402 | Malicious | Not scored | 13 Nov, 2025 | npm cryptography-biohacking-xml-graphql |
Malicious release: Malicious code in cryptography-cross-env-google-yildun (npm) MAL-2025-186403 | Malicious | Not scored | 13 Nov, 2025 | npm cryptography-cross-env-google-yildun |
Malicious release: Malicious code in cryptography-epimetheus-prettier-plugin-markdown-run-script (npm) MAL-2025-186404 | Malicious | Not scored | 13 Nov, 2025 | npm cryptography-epimetheus-prettier-plugin-markdown-run-script |
Malicious release: Malicious code in cryptography-webdriver-manager-schema-test (npm) MAL-2025-186405 | Malicious | Not scored | 13 Nov, 2025 | npm cryptography-webdriver-manager-schema-test |
Malicious release: Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm) MAL-2025-186406 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-bootes-html-webpack-plugin-ichnology |
Malicious release: Malicious code in csrf-callisto-hapi-nextjs (npm) MAL-2025-186407 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-callisto-hapi-nextjs |
Malicious release: Malicious code in csrf-carina-technocracy-areology (npm) MAL-2025-186408 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-carina-technocracy-areology |
Malicious release: Malicious code in csrf-eslint-config-futurology-sass-loader (npm) MAL-2025-186409 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-eslint-config-futurology-sass-loader |
Malicious release: Malicious code in csrf-farout-backend-fomalhaut (npm) MAL-2025-186410 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-farout-backend-fomalhaut |
Malicious release: Malicious code in csrf-mutation-oauth-convict (npm) MAL-2025-186411 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-mutation-oauth-convict |
Malicious release: Malicious code in csrf-relay-miranda-halley (npm) MAL-2025-186412 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-relay-miranda-halley |
Malicious release: Malicious code in csrf-thermochronology-oscillation-janus (npm) MAL-2025-186413 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-thermochronology-oscillation-janus |
Malicious release: Malicious code in css-loader-castor-supervisor-elara (npm) MAL-2025-186414 | Malicious | Not scored | 13 Nov, 2025 | npm css-loader-castor-supervisor-elara |
Malicious release: Malicious code in css-loader-iota-celeste-electron (npm) MAL-2025-186415 | Malicious | Not scored | 13 Nov, 2025 | npm css-loader-iota-celeste-electron |
Malicious release: Malicious code in css-loader-mui-wasat-standard (npm) MAL-2025-186416 | Malicious | Not scored | 13 Nov, 2025 | npm css-loader-mui-wasat-standard |
Malicious release: Malicious code in css-loader-rehype-toml-version (npm) MAL-2025-186417 | Malicious | Not scored | 13 Nov, 2025 | npm css-loader-rehype-toml-version |
Malicious release: Malicious code in css-minimizer-webpack-plugin-brane-saturnology-quito (npm) MAL-2025-186418 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-brane-saturnology-quito |
Malicious release: Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova (npm) MAL-2025-186419 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-firebase-corvus-supernova |
Malicious release: Malicious code in css-minimizer-webpack-plugin-framework-nextjs-upgrade (npm) MAL-2025-186420 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-framework-nextjs-upgrade |
Malicious release: Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo (npm) MAL-2025-186421 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-hermes-spectron-pavo |
Malicious release: Malicious code in css-minimizer-webpack-plugin-hugo-gemini-command (npm) MAL-2025-186422 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-hugo-gemini-command |
Malicious release: Malicious code in css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint (npm) MAL-2025-186423 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint |
Malicious release: Malicious code in css-minimizer-webpack-plugin-superagent-npm-private (npm) MAL-2025-186424 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-superagent-npm-private |
Malicious release: Malicious code in css-minimizer-webpack-plugin-virtualreality-ignite-node-sass (npm) MAL-2025-186425 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-virtualreality-ignite-node-sass |
Malicious release: Malicious code in css-minimizer-webpack-plugin-vuetify-ichnology-redshift (npm) MAL-2025-186426 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-vuetify-ichnology-redshift |
Malicious release: Malicious code in csv-aldebaran-biohacking-cluster (npm) MAL-2025-186427 | Malicious | Not scored | 13 Nov, 2025 | npm csv-aldebaran-biohacking-cluster |
Malicious release: Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin (npm) MAL-2025-186428 | Malicious | Not scored | 13 Nov, 2025 | npm csv-dysonswarm-aether-optimize-css-assets-webpack-plugin |
Malicious release: Malicious code in csv-envconfig-achernar-stratigraphy (npm) MAL-2025-186429 | Malicious | Not scored | 13 Nov, 2025 | npm csv-envconfig-achernar-stratigraphy |
Malicious release: Malicious code in csv-helmet-dione-canopus (npm) MAL-2025-186430 | Malicious | Not scored | 13 Nov, 2025 | npm csv-helmet-dione-canopus |
Malicious release: Malicious code in csv-mensa-hadron-sagitta (npm) MAL-2025-186431 | Malicious | Not scored | 13 Nov, 2025 | npm csv-mensa-hadron-sagitta |
Malicious release: Malicious code in csv-mongodb-rehype-less-loader (npm) MAL-2025-186432 | Malicious | Not scored | 13 Nov, 2025 | npm csv-mongodb-rehype-less-loader |
Malicious release: Malicious code in csv-puppeteer-phoenix-event (npm) MAL-2025-186433 | Malicious | Not scored | 13 Nov, 2025 | npm csv-puppeteer-phoenix-event |
Malicious release: Malicious code in csv-steganography-sadr-buffer (npm) MAL-2025-186434 | Malicious | Not scored | 13 Nov, 2025 | npm csv-steganography-sadr-buffer |
Malicious release: Malicious code in cybernetics-concurrently-testcafe-foundation (npm) MAL-2025-186435 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-concurrently-testcafe-foundation |
Malicious release: Malicious code in cybernetics-configstore-apex-luna (npm) MAL-2025-186436 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-configstore-apex-luna |
Malicious release: Malicious code in cybernetics-duplex-oscillation-publish (npm) MAL-2025-186437 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-duplex-oscillation-publish |
Malicious release: Malicious code in cybernetics-duplex-wolf-json (npm) MAL-2025-186438 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-duplex-wolf-json |
Malicious release: Malicious code in cybernetics-selenology-local-eridanus (npm) MAL-2025-186439 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-selenology-local-eridanus |
Malicious release: Malicious code in cybernetics-uninstall-kinetic-neptune (npm) MAL-2025-186440 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-uninstall-kinetic-neptune |
Malicious release: Malicious code in cygnus-got-nconf-public (npm) MAL-2025-186441 | Malicious | Not scored | 13 Nov, 2025 | npm cygnus-got-nconf-public |
Malicious release: Malicious code in cygnus-tool-update-xenos (npm) MAL-2025-186442 | Malicious | Not scored | 13 Nov, 2025 | npm cygnus-tool-update-xenos |
Malicious release: Malicious code in cygnus-umbra-webdriver-mocha-docusaurus (npm) MAL-2025-186443 | Malicious | Not scored | 13 Nov, 2025 | npm cygnus-umbra-webdriver-mocha-docusaurus |
Malicious release: Malicious code in cygnus-whitedwarf-entanglement-google (npm) MAL-2025-186444 | Malicious | Not scored | 13 Nov, 2025 | npm cygnus-whitedwarf-entanglement-google |
Malicious release: Malicious code in cygnus-winston-geodynamo-biomimicry (npm) MAL-2025-186445 | Malicious | Not scored | 13 Nov, 2025 | npm cygnus-winston-geodynamo-biomimicry |
Malicious release: Malicious code in cypress-cosmiconfig-dotenv-safe-telesto (npm) MAL-2025-186446 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-cosmiconfig-dotenv-safe-telesto |
Malicious release: Malicious code in cypress-enif-robotics-miranda (npm) MAL-2025-186447 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-enif-robotics-miranda |