Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cypress-geckodriver-vulcan-metalsmith (npm) MAL-2025-186448 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-geckodriver-vulcan-metalsmith |
Malicious release: Malicious code in cypress-phoenix-higgs-chromedriver (npm) MAL-2025-186449 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-phoenix-higgs-chromedriver |
Malicious release: Malicious code in cypress-procyon-neptune-epigenetics (npm) MAL-2025-186450 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-procyon-neptune-epigenetics |
Malicious release: Malicious code in cypress-technosignature-solarnebula-protractor (npm) MAL-2025-186451 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-technosignature-solarnebula-protractor |
Malicious release: Malicious code in cypress-vuetify-mutation-hermes (npm) MAL-2025-186452 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-vuetify-mutation-hermes |
Malicious release: Malicious code in cz-conventional-changelog-blitz-steganography-lacerta (npm) MAL-2025-186453 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-blitz-steganography-lacerta |
Malicious release: Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha (npm) MAL-2025-186454 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-heliophysics-carpo-mocha |
Malicious release: Malicious code in cz-conventional-changelog-ora-rehype-xanadu (npm) MAL-2025-186455 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-ora-rehype-xanadu |
Malicious release: Malicious code in cz-conventional-changelog-selenium-xanadu-enif (npm) MAL-2025-186456 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-selenium-xanadu-enif |
Malicious release: Malicious code in cz-conventional-changelog-sirius-cluster-tectonophysics (npm) MAL-2025-186457 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-sirius-cluster-tectonophysics |
Malicious release: Malicious code in cz-conventional-changelog-stop-readable-mutation (npm) MAL-2025-186458 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-stop-readable-mutation |
Malicious release: Malicious code in cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis (npm) MAL-2025-186459 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis |
Malicious release: Malicious code in dactyl-loopback-axios-lacerta (npm) MAL-2025-186460 | Malicious | Not scored | 13 Nov, 2025 | npm dactyl-loopback-axios-lacerta |
Malicious release: Malicious code in dactyl-phoenix-rest-gulp (npm) MAL-2025-186461 | Malicious | Not scored | 13 Nov, 2025 | npm dactyl-phoenix-rest-gulp |
Malicious release: Malicious code in dactyl-transform-nightwatch-petrology (npm) MAL-2025-186462 | Malicious | Not scored | 13 Nov, 2025 | npm dactyl-transform-nightwatch-petrology |
Malicious release: Malicious code in daemon-container-rain-route-reject (npm) MAL-2025-186463 | Malicious | Not scored | 13 Nov, 2025 | npm daemon-container-rain-route-reject |
Malicious release: Malicious code in daemon-epsilon-hash-link-slow (npm) MAL-2025-186464 | Malicious | Not scored | 13 Nov, 2025 | npm daemon-epsilon-hash-link-slow |
Malicious release: Malicious code in daemon-function-throw-file-dog (npm) MAL-2025-186465 | Malicious | Not scored | 13 Nov, 2025 | npm daemon-function-throw-file-dog |
Malicious release: Malicious code in daemon-old-mu-interpret-deserialize (npm) MAL-2025-186466 | Malicious | Not scored | 13 Nov, 2025 | npm daemon-old-mu-interpret-deserialize |
Malicious release: Malicious code in dagda-ablation-ganymede-meteor (npm) MAL-2025-186467 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-ablation-ganymede-meteor |
Malicious release: Malicious code in dagda-event-despina-event (npm) MAL-2025-186468 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-event-despina-event |
Malicious release: Malicious code in dagda-ganymede-fornax-ursa (npm) MAL-2025-186469 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-ganymede-fornax-ursa |
Malicious release: Malicious code in dagda-geckodriver-perturbation-geodynamo (npm) MAL-2025-186470 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-geckodriver-perturbation-geodynamo |
Malicious release: Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics (npm) MAL-2025-186471 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-non-blocking-html-webpack-plugin-astrophysics |
Malicious release: Malicious code in dagda-ophiuchus-koa-solarnebula (npm) MAL-2025-186472 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-ophiuchus-koa-solarnebula |
Malicious release: Malicious code in dagda-polaris-entanglement-meteor (npm) MAL-2025-186473 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-polaris-entanglement-meteor |
Malicious release: Malicious code in dagda-pulsar-redshift-remark (npm) MAL-2025-186474 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-pulsar-redshift-remark |
Malicious release: Malicious code in dagda-spawn-selenium-vega (npm) MAL-2025-186475 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-spawn-selenium-vega |
Malicious release: Malicious code in dagda-technocracy-commitlint-gacrux (npm) MAL-2025-186476 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-technocracy-commitlint-gacrux |
Malicious release: Malicious code in dagda-tectonophysics-materialize-astrometry (npm) MAL-2025-186477 | Malicious | Not scored | 13 Nov, 2025 | npm dagda-tectonophysics-materialize-astrometry |
Malicious release: Malicious code in darkenergy-config-pulsar-development (npm) MAL-2025-186478 | Malicious | Not scored | 13 Nov, 2025 | npm darkenergy-config-pulsar-development |
Malicious release: Malicious code in darkenergy-google-paleoanthropology-thuban (npm) MAL-2025-186479 | Malicious | Not scored | 13 Nov, 2025 | npm darkenergy-google-paleoanthropology-thuban |
Malicious release: Malicious code in darkenergy-helmet-epigenetics-leda (npm) MAL-2025-186480 | Malicious | Not scored | 13 Nov, 2025 | npm darkenergy-helmet-epigenetics-leda |
Malicious release: Malicious code in darkenergy-janus-firebase-chalk (npm) MAL-2025-186481 | Malicious | Not scored | 13 Nov, 2025 | npm darkenergy-janus-firebase-chalk |
Malicious release: Malicious code in darkenergy-palynology-publish-terraforming (npm) MAL-2025-186482 | Malicious | Not scored | 13 Nov, 2025 | npm darkenergy-palynology-publish-terraforming |
Malicious release: Malicious code in darkenergy-regulus-hadron-elektra (npm) MAL-2025-186483 | Malicious | Not scored | 13 Nov, 2025 | npm darkenergy-regulus-hadron-elektra |
Malicious release: Malicious code in darkenergy-style-loader-style-loader-node-config (npm) MAL-2025-186484 | Malicious | Not scored | 13 Nov, 2025 | npm darkenergy-style-loader-style-loader-node-config |
Malicious release: Malicious code in darkmatter-build-kuiperbelt-xanthus (npm) MAL-2025-186485 | Malicious | Not scored | 13 Nov, 2025 | npm darkmatter-build-kuiperbelt-xanthus |
Malicious release: Malicious code in darkmatter-exosphere-exoplanetology-yakutsk (npm) MAL-2025-186486 | Malicious | Not scored | 13 Nov, 2025 | npm darkmatter-exosphere-exoplanetology-yakutsk |
Malicious release: Malicious code in darkmatter-gravitationalwave-less-websockets (npm) MAL-2025-186487 | Malicious | Not scored | 13 Nov, 2025 | npm darkmatter-gravitationalwave-less-websockets |
Malicious release: Malicious code in darkmatter-halley-farout-archaeometry (npm) MAL-2025-186488 | Malicious | Not scored | 13 Nov, 2025 | npm darkmatter-halley-farout-archaeometry |
Malicious release: Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda (npm) MAL-2025-186489 | Malicious | Not scored | 13 Nov, 2025 | npm darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda |
Malicious release: Malicious code in data-grep-string-transpile-link (npm) MAL-2025-186490 | Malicious | Not scored | 13 Nov, 2025 | npm data-grep-string-transpile-link |
Malicious release: Malicious code in data-node-sanitize-balance-optimize (npm) MAL-2025-186491 | Malicious | Not scored | 13 Nov, 2025 | npm data-node-sanitize-balance-optimize |
Malicious release: Malicious code in data-omicron-static-quick-serialize (npm) MAL-2025-186492 | Malicious | Not scored | 13 Nov, 2025 | npm data-omicron-static-quick-serialize |
Malicious release: Malicious code in data-virtualize-cluster-view-phi (npm) MAL-2025-186493 | Malicious | Not scored | 13 Nov, 2025 | npm data-virtualize-cluster-view-phi |
Malicious release: Malicious code in debug-cache-report-cache-index (npm) MAL-2025-186494 | Malicious | Not scored | 13 Nov, 2025 | npm debug-cache-report-cache-index |
Malicious release: Malicious code in debug-char-code-double-encode (npm) MAL-2025-186495 | Malicious | Not scored | 13 Nov, 2025 | npm debug-char-code-double-encode |
Malicious release: Malicious code in debug-container-zeta-load-log (npm) MAL-2025-186496 | Malicious | Not scored | 13 Nov, 2025 | npm debug-container-zeta-load-log |
Malicious release: Malicious code in debug-tau-wind-gamma-sun (npm) MAL-2025-186497 | Malicious | Not scored | 13 Nov, 2025 | npm debug-tau-wind-gamma-sun |