Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in node-calculator-190a (npm) MAL-2025-192826 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-190a |
Malicious release: Malicious code in node-calculator-290c (npm) MAL-2025-192827 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-290c |
Malicious release: Malicious code in no-use-extend-native (npm) MAL-2025-192825 | Malicious | Not scored | 23 Dec, 2025 | npm no-use-extend-native |
Malicious release: Malicious code in no-unsanitized (npm) MAL-2025-192824 | Malicious | Not scored | 23 Dec, 2025 | npm no-unsanitized |
Malicious release: Malicious code in nintendo-test (npm) MAL-2025-192823 | Malicious | Not scored | 23 Dec, 2025 | npm nintendo-test |
Malicious release: Malicious code in ke-moma2 (npm) MAL-2025-192822 | Malicious | Not scored | 23 Dec, 2025 | npm ke-moma2 |
Malicious release: Malicious code in karem6 (npm) MAL-2025-192820 | Malicious | Not scored | 23 Dec, 2025 | npm karem6 |
Malicious release: Malicious code in ke-moma (npm) MAL-2025-192821 | Malicious | Not scored | 23 Dec, 2025 | npm ke-moma |
Malicious release: Malicious code in jz-ui-user (npm) MAL-2025-192818 | Malicious | Not scored | 23 Dec, 2025 | npm jz-ui-user |
Malicious release: Malicious code in jz-user-js-bridge (npm) MAL-2025-192819 | Malicious | Not scored | 23 Dec, 2025 | npm jz-user-js-bridge |
Malicious release: Malicious code in jz-native-js-bridge (npm) MAL-2025-192817 | Malicious | Not scored | 23 Dec, 2025 | npm jz-native-js-bridge |
Malicious release: Malicious code in jstoauto (npm) MAL-2025-192815, SNYK-JS-JSTOAUTO-14152273 | Malicious | Not scored | 23 Dec, 2025 | npm jstoauto |
Malicious release: Malicious code in jsxswap (npm) MAL-2025-192816 | Malicious | Not scored | 23 Dec, 2025 | npm jsxswap |
Malicious release: Malicious code in jsswapper (npm) MAL-2025-192814, SNYK-JS-JSSWAPPER-14152272 | Malicious | Not scored | 23 Dec, 2025 | npm jsswapper |
Malicious release: Malicious code in jsonupon (npm) MAL-2025-192813 | Malicious | Not scored | 23 Dec, 2025 | npm jsonupon |
Malicious release: Malicious code in jsonauto (npm) MAL-2025-192811, SNYK-JS-JSONAUTO-14152267 | Malicious | Not scored | 23 Dec, 2025 | npm jsonauto |
Malicious release: Malicious code in jsonrecap (npm) MAL-2025-192812, SNYK-JS-JSONRECAP-14152271 | Malicious | Not scored | 23 Dec, 2025 | npm jsonrecap |
Malicious release: Malicious code in jsonauthcap (npm) MAL-2025-192810, SNYK-JS-JSONAUTHCAP-14152264 | Malicious | Not scored | 23 Dec, 2025 | npm jsonauthcap |
Malicious release: Malicious code in jsonauth (npm) MAL-2025-192809, SNYK-JS-JSONAUTH-14152266 | Malicious | Not scored | 23 Dec, 2025 | npm jsonauth |
Malicious release: Malicious code in jsonapptoken (npm) MAL-2025-192808, SNYK-JS-JSONAPPTOKEN-14152265 | Malicious | Not scored | 23 Dec, 2025 | npm jsonapptoken |
Malicious release: Malicious code in json-panels (npm) MAL-2025-192807, SNYK-JS-JSONPANELS-14152268 | Malicious | Not scored | 23 Dec, 2025 | npm json-panels |
Malicious release: Malicious code in jest-formatting (npm) MAL-2025-192806 | Malicious | Not scored | 23 Dec, 2025 | npm jest-formatting |
Malicious release: Malicious code in intuit-test (npm) MAL-2025-192805 | Malicious | Not scored | 23 Dec, 2025 | npm intuit-test |
Malicious release: Malicious code in injectorpackage (npm) MAL-2025-192804 | Malicious | Not scored | 23 Dec, 2025 | npm injectorpackage |
Malicious release: Malicious code in init-router (npm) MAL-2025-192803, SNYK-JS-INITROUTER-14152257 | Malicious | Not scored | 23 Dec, 2025 | npm init-router |
Malicious release: Malicious code in ingka-test (npm) MAL-2025-192802 | Malicious | Not scored | 23 Dec, 2025 | npm ingka-test |
Malicious release: Malicious code in hiro-docs (npm) MAL-2025-192801 | Malicious | Not scored | 23 Dec, 2025 | npm hiro-docs |
Malicious release: Malicious code in gibertserct8 (npm) MAL-2025-192800 | Malicious | Not scored | 23 Dec, 2025 | npm gibertserct8 |
Malicious release: Malicious code in gibertserct15 (npm) MAL-2025-192799 | Malicious | Not scored | 23 Dec, 2025 | npm gibertserct15 |
Malicious release: Malicious code in flagstealer (npm) MAL-2025-192798 | Malicious | Not scored | 23 Dec, 2025 | npm flagstealer |
Malicious release: Malicious code in fe-cdnpath-transform (npm) MAL-2025-192797 | Malicious | Not scored | 23 Dec, 2025 | npm fe-cdnpath-transform |
Malicious release: Malicious code in estree-util (npm) MAL-2025-192796 | Malicious | Not scored | 23 Dec, 2025 | npm estree-util |
Malicious release: Malicious code in elf-stats-whimsical-satchel-586 (npm) MAL-2025-192795 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-whimsical-satchel-586 |
Malicious release: Malicious code in elf-stats-whimsical-cocoa-613 (npm) MAL-2025-192794 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-whimsical-cocoa-613 |
Malicious release: Malicious code in elf-stats-whimsical-cocoa-243 (npm) MAL-2025-192793 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-whimsical-cocoa-243 |
Malicious release: Malicious code in elf-stats-velvet-sparkler-555 (npm) MAL-2025-192792 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-velvet-sparkler-555 |
Malicious release: Malicious code in elf-stats-velvet-bow-244 (npm) MAL-2025-192791 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-velvet-bow-244 |
Malicious release: Malicious code in elf-stats-sprucey-giftbox-118 (npm) MAL-2025-192790 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-sprucey-giftbox-118 |
Malicious release: Malicious code in elf-stats-sprucey-cookie-492 (npm) MAL-2025-192789 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-sprucey-cookie-492 |
Malicious release: Malicious code in elf-stats-sparkly-train-831 (npm) GHSA-q5j9-hg66-r57r, MAL-2025-192788 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-sparkly-train-831 |
Malicious release: Malicious code in elf-stats-sparkly-toolkit-703 (npm) MAL-2025-192787 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-sparkly-toolkit-703 |
Malicious release: Malicious code in elf-stats-sparkly-sled-484 (npm) MAL-2025-192786 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-sparkly-sled-484 |
Malicious release: Malicious code in elf-stats-sleighing-hammer-902 (npm) MAL-2025-192785 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-sleighing-hammer-902 |
Malicious release: Malicious code in elf-stats-silvered-toolkit-914 (npm) MAL-2025-192784 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-silvered-toolkit-914 |
Malicious release: Malicious code in elf-stats-silvered-bow-679 (npm) MAL-2025-192783 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-silvered-bow-679 |
Malicious release: Malicious code in elf-stats-shimmering-fir-491 (npm) MAL-2025-192782 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-shimmering-fir-491 |
Malicious release: Malicious code in elf-stats-rooftop-pinecone-887 (npm) MAL-2025-192781 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-rooftop-pinecone-887 |
Malicious release: Malicious code in elf-stats-rooftop-mitten-324 (npm) MAL-2025-192780 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-rooftop-mitten-324 |
Malicious release: Malicious code in elf-stats-piney-train-884 (npm) MAL-2025-192779 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-piney-train-884 |
Malicious release: Malicious code in elf-stats-nutmeg-fir-716 (npm) MAL-2025-192778 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-nutmeg-fir-716 |