Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in elf-stats-mistletoe-muffin-976 (npm) MAL-2025-192777 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-mistletoe-muffin-976 |
Malicious release: Malicious code in elf-stats-mistletoe-cookie-256 (npm) MAL-2025-192776 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-mistletoe-cookie-256 |
Malicious release: Malicious code in elf-stats-merry-sparkler-797 (npm) MAL-2025-192775 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-merry-sparkler-797 |
Malicious release: Malicious code in elf-stats-joyous-saddlebag-967 (npm) MAL-2025-192774 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-joyous-saddlebag-967 |
Malicious release: Malicious code in elf-stats-jolly-snowglobe-266 (npm) MAL-2025-192773 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-jolly-snowglobe-266 |
Malicious release: Malicious code in elf-stats-holly-fir-593 (npm) MAL-2025-192772 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-holly-fir-593 |
Malicious release: Malicious code in elf-stats-glittering-cookie-844 (npm) MAL-2025-192771 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-glittering-cookie-844 |
Malicious release: Malicious code in elf-stats-ginger-bow-370 (npm) MAL-2025-192770 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-ginger-bow-370 |
Malicious release: Malicious code in elf-stats-fuzzy-ribbon-205 (npm) MAL-2025-192769 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-fuzzy-ribbon-205 |
Malicious release: Malicious code in elf-stats-flickering-satchel-815 (npm) MAL-2025-192768 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-flickering-satchel-815 |
Malicious release: Malicious code in elf-stats-festive-marshmallow-962 (npm) MAL-2025-192767 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-festive-marshmallow-962 |
Malicious release: Malicious code in elf-stats-evergreen-lantern-387 (npm) MAL-2025-192766 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-evergreen-lantern-387 |
Malicious release: Malicious code in elf-stats-ember-workbench-742 (npm) MAL-2025-192765 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-ember-workbench-742 |
Malicious release: Malicious code in elf-stats-cosy-sled-455 (npm) MAL-2025-192751 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-cosy-sled-455 |
Malicious release: Malicious code in elf-stats-cosy-cocoa-331 (npm) MAL-2025-192750 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-cosy-cocoa-331 |
Malicious release: Malicious code in elf-stats-cocoa-mitten-558 (npm) MAL-2025-192741 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-cocoa-mitten-558 |
Malicious release: Malicious code in elf-stats-caroling-wreath-635 (npm) MAL-2025-192740 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-caroling-wreath-635 |
Malicious release: Malicious code in elf-stats-caroling-train-677 (npm) MAL-2025-192739 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-caroling-train-677 |
Malicious release: Malicious code in elf-stats-caroling-star-725 (npm) MAL-2025-192738 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-caroling-star-725 |
Malicious release: Malicious code in elf-stats-candlelit-ornament-402 (npm) MAL-2025-192737 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-candlelit-ornament-402 |
Malicious release: Malicious code in elf-stats-bright-pinecone-706 (npm) MAL-2025-192736 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-bright-pinecone-706 |
Malicious release: Malicious code in elf-stats-aurora-rocket-733 (npm) MAL-2025-192735 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-aurora-rocket-733 |
Malicious release: Malicious code in elf-stats-aurora-drum-979 (npm) MAL-2025-192734 | Malicious | Not scored | 23 Dec, 2025 | npm elf-stats-aurora-drum-979 |
Malicious release: Malicious code in ddxq_cms_tools (npm) MAL-2025-192733 | Malicious | Not scored | 23 Dec, 2025 | npm ddxq_cms_tools |
Malicious release: Malicious code in ddos-turbo-ecma (npm) MAL-2025-192731 | Malicious | Not scored | 23 Dec, 2025 | npm ddos-turbo-ecma |
Malicious release: Malicious code in ddos-turbo-max (npm) MAL-2025-192732 | Malicious | Not scored | 23 Dec, 2025 | npm ddos-turbo-max |
Malicious release: Malicious code in corplib (npm) MAL-2025-192730 | Malicious | Not scored | 23 Dec, 2025 | npm corplib |
Malicious release: Malicious code in cookie-mapper (npm) MAL-2025-192728, SNYK-JS-COOKIEMAPPER-14152249 | Malicious | Not scored | 23 Dec, 2025 | npm cookie-mapper |
Malicious release: Malicious code in cookie-breaker (npm) MAL-2025-192727, SNYK-JS-COOKIEBREAKER-14152248 | Malicious | Not scored | 23 Dec, 2025 | npm cookie-breaker |
Malicious release: Malicious code in cms_comp_popup (npm) MAL-2025-192726 | Malicious | Not scored | 23 Dec, 2025 | npm cms_comp_popup |
Malicious release: Malicious code in chai-pack (npm) MAL-2025-192725, SNYK-JS-CHAIPACK-14152241 | Malicious | Not scored | 23 Dec, 2025 | npm chai-pack |
Malicious release: Malicious code in chai-as-validated (npm) GHSA-xhmc-g8hp-fgqq, MAL-2025-192724 | Malicious | Not scored | 23 Dec, 2025 | npm chai-as-validated |
Malicious release: Malicious code in chai-as-tested (npm) MAL-2025-192723, SNYK-JS-CHAIASTESTED-14152236 | Malicious | Not scored | 23 Dec, 2025 | npm chai-as-tested |
Malicious release: Malicious code in chai-as-deploy (npm) MAL-2025-192722, SNYK-JS-CHAIASDEPLOY-14152234 | Malicious | Not scored | 23 Dec, 2025 | npm chai-as-deploy |
Malicious release: Malicious code in caterpillar-test (npm) MAL-2025-192721 | Malicious | Not scored | 23 Dec, 2025 | npm caterpillar-test |
Malicious release: Malicious code in canva-test (npm) MAL-2025-192720 | Malicious | Not scored | 23 Dec, 2025 | npm canva-test |
Malicious release: Malicious code in calculator-40ed (npm) MAL-2025-192719 | Malicious | Not scored | 23 Dec, 2025 | npm calculator-40ed |
Malicious release: Malicious code in bootstrap-setflexcolor (npm) MAL-2025-192718, SNYK-JS-BOOTSTRAPSETFLEXCOLOR-14152233 | Malicious | Not scored | 23 Dec, 2025 | npm bootstrap-setflexcolor |
Malicious release: Malicious code in bootstrap-setcolors (npm) MAL-2025-192717, SNYK-JS-BOOTSTRAPSETCOLORS-14152232 | Malicious | Not scored | 23 Dec, 2025 | npm bootstrap-setcolors |
Malicious release: Malicious code in bootstrap-setcolor (npm) MAL-2025-192716, SNYK-JS-BOOTSTRAPSETCOLOR-14152231 | Malicious | Not scored | 23 Dec, 2025 | npm bootstrap-setcolor |
Malicious release: Malicious code in booms-ai (npm) MAL-2025-192715 | Malicious | Not scored | 23 Dec, 2025 | npm booms-ai |
Malicious release: Malicious code in bignumberx (npm) MAL-2025-192714 | Malicious | Not scored | 23 Dec, 2025 | npm bignumberx |
Malicious release: Malicious code in baidu-src-test4 (npm) MAL-2025-192713 | Malicious | Not scored | 23 Dec, 2025 | npm baidu-src-test4 |
Malicious release: Malicious code in auth-handler (npm) MAL-2025-192712, SNYK-JS-AUTHHANDLER-14152228 | Malicious | Not scored | 23 Dec, 2025 | npm auth-handler |
Malicious release: Malicious code in assert-json-not (npm) MAL-2025-192711, SNYK-JS-ASSERTJSONNOT-14152227 | Malicious | Not scored | 23 Dec, 2025 | npm assert-json-not |
Malicious release: Malicious code in amournapraia (npm) MAL-2025-192710 | Malicious | Not scored | 23 Dec, 2025 | npm amournapraia |
Malicious release: Malicious code in amazon-testpackage (npm) MAL-2025-192709 | Malicious | Not scored | 23 Dec, 2025 | npm amazon-testpackage |
Malicious release: Malicious code in alicenpmpackage (npm) MAL-2025-192708 | Malicious | Not scored | 23 Dec, 2025 | npm alicenpmpackage |
Malicious release: Malicious code in acz.view.src (npm) MAL-2025-192707 | Malicious | Not scored | 23 Dec, 2025 | npm acz.view.src |
Malicious release: Malicious code in @ownbackup/ob-loader (npm) MAL-2025-192705 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/ob-loader |