Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in docusaurus-thermosphere-aquarius-rehype (npm) MAL-2025-186598 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-thermosphere-aquarius-rehype |
Malicious release: Malicious code in docusaurus-titan-betelgeuse-request (npm) MAL-2025-186599 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-titan-betelgeuse-request |
Malicious release: Malicious code in docusaurus-xml-proxima-luna (npm) MAL-2025-186600 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-xml-proxima-luna |
Malicious release: Malicious code in dog-book-protected-scale-grid (npm) MAL-2025-186601 | Malicious | Not scored | 13 Nov, 2025 | npm dog-book-protected-scale-grid |
Malicious release: Malicious code in dog-daemon-transpile-grid-bundle (npm) MAL-2025-186602 | Malicious | Not scored | 13 Nov, 2025 | npm dog-daemon-transpile-grid-bundle |
Malicious release: Malicious code in dog-process-file-file-moon (npm) MAL-2025-186603 | Malicious | Not scored | 13 Nov, 2025 | npm dog-process-file-file-moon |
Malicious release: Malicious code in dog-water-double-sudo-export (npm) MAL-2025-186604 | Malicious | Not scored | 13 Nov, 2025 | npm dog-water-double-sudo-export |
Malicious release: Malicious code in dorado-development-troposphere-futurology (npm) MAL-2025-186605 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-development-troposphere-futurology |
Malicious release: Malicious code in dorado-hexo-sqlite-postcss-loader (npm) MAL-2025-186606 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-hexo-sqlite-postcss-loader |
Malicious release: Malicious code in dorado-hydrogeology-zooarchaeology-regulus (npm) MAL-2025-186607 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-hydrogeology-zooarchaeology-regulus |
Malicious release: Malicious code in dorado-jest-gatsby-fornax (npm) MAL-2025-186608 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-jest-gatsby-fornax |
Malicious release: Malicious code in dorado-norma-sequelize-hydrogeology (npm) MAL-2025-186609 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-norma-sequelize-hydrogeology |
Malicious release: Malicious code in dorado-slidev-hyperion-avior (npm) MAL-2025-186610 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-slidev-hyperion-avior |
Malicious release: Malicious code in dorado-spectron-webdriver-spectron-cache (npm) MAL-2025-186611 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-spectron-webdriver-spectron-cache |
Malicious release: Malicious code in dotenv-hexo-apollo-cryonics (npm) MAL-2025-186612 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-hexo-apollo-cryonics |
Malicious release: Malicious code in dotenv-metalsmith-proxima-heliophysics (npm) MAL-2025-186613 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-metalsmith-proxima-heliophysics |
Malicious release: Malicious code in dotenv-ophiuchus-steganography-event (npm) MAL-2025-186614 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-ophiuchus-steganography-event |
Malicious release: Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm) MAL-2025-186615 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-parse-variables-astrobiology-readable-magellan |
Malicious release: Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse (npm) MAL-2025-186616 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-parse-variables-biogeochemistry-version-betelgeuse |
Malicious release: Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith (npm) MAL-2025-186617 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-parse-variables-heliophysics-wasat-metalsmith |
Malicious release: Malicious code in dotenv-parse-variables-init-child-process-genomics (npm) MAL-2025-186618 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-parse-variables-init-child-process-genomics |
Malicious release: Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm) MAL-2025-186619 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-parse-variables-public-cosmiconfig-zenobia |
Malicious release: Malicious code in dotenv-safe-electron-delphinus-dynamo (npm) MAL-2025-186620 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-electron-delphinus-dynamo |
Malicious release: Malicious code in dotenv-safe-jovian-astroinformatics-ablation (npm) MAL-2025-186621 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-jovian-astroinformatics-ablation |
Malicious release: Malicious code in dotenv-safe-nodemon-ariel-petrology (npm) MAL-2025-186622 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-nodemon-ariel-petrology |
Malicious release: Malicious code in dotenv-safe-norma-vuetify-paleomagnetism (npm) MAL-2025-186623 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-norma-vuetify-paleomagnetism |
Malicious release: Malicious code in dotenv-safe-parsec-soap-polaris (npm) MAL-2025-186624 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-parsec-soap-polaris |
Malicious release: Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm) MAL-2025-186625 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-pino-pretty-terser-postcss |
Malicious release: Malicious code in dotenv-safe-sedimentology-wolf-singularity (npm) MAL-2025-186626 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-sedimentology-wolf-singularity |
Malicious release: Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm) MAL-2025-186627 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-vortex-meissa-webdriverio |
Malicious release: Malicious code in dotenv-sedna-inflation-figures (npm) MAL-2025-186628 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-sedna-inflation-figures |
Malicious release: Malicious code in dotenv-semantic-ui-fusion-hexo (npm) MAL-2025-186629 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-semantic-ui-fusion-hexo |
Malicious release: Malicious code in double-benchmark-pipe-hash-virtualize (npm) MAL-2025-186630 | Malicious | Not scored | 13 Nov, 2025 | npm double-benchmark-pipe-hash-virtualize |
Malicious release: Malicious code in double-decode-encrypt-cache-bundle (npm) MAL-2025-186631 | Malicious | Not scored | 13 Nov, 2025 | npm double-decode-encrypt-cache-bundle |
Malicious release: Malicious code in double-file-encode-moon-virtualize (npm) MAL-2025-186632 | Malicious | Not scored | 13 Nov, 2025 | npm double-file-encode-moon-virtualize |
Malicious release: Malicious code in double-final-proxy-gamma-alpha (npm) MAL-2025-186633 | Malicious | Not scored | 13 Nov, 2025 | npm double-final-proxy-gamma-alpha |
Malicious release: Malicious code in double-grid-resolve-data-log (npm) MAL-2025-186634 | Malicious | Not scored | 13 Nov, 2025 | npm double-grid-resolve-data-log |
Malicious release: Malicious code in double-rain-protected-import-monitor (npm) MAL-2025-186635 | Malicious | Not scored | 13 Nov, 2025 | npm double-rain-protected-import-monitor |
Malicious release: Malicious code in double-uglify-long-static-cron (npm) MAL-2025-186636 | Malicious | Not scored | 13 Nov, 2025 | npm double-uglify-long-static-cron |
Malicious release: Malicious code in draco-convict-carina-superagent (npm) MAL-2025-186637 | Malicious | Not scored | 13 Nov, 2025 | npm draco-convict-carina-superagent |
Malicious release: Malicious code in draco-cygnus-repository-aurora (npm) MAL-2025-186638 | Malicious | Not scored | 13 Nov, 2025 | npm draco-cygnus-repository-aurora |
Malicious release: Malicious code in draco-gacrux-carpo-await (npm) MAL-2025-186639 | Malicious | Not scored | 13 Nov, 2025 | npm draco-gacrux-carpo-await |
Malicious release: Malicious code in draco-hermes-betelgeuse-auth0 (npm) MAL-2025-186640 | Malicious | Not scored | 13 Nov, 2025 | npm draco-hermes-betelgeuse-auth0 |
Malicious release: Malicious code in draco-less-polaris-miranda (npm) MAL-2025-186641 | Malicious | Not scored | 13 Nov, 2025 | npm draco-less-polaris-miranda |
Malicious release: Malicious code in draco-quasarjet-envconfig-technocracy (npm) MAL-2025-186642 | Malicious | Not scored | 13 Nov, 2025 | npm draco-quasarjet-envconfig-technocracy |
Malicious release: Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm) MAL-2025-186643 | Malicious | Not scored | 13 Nov, 2025 | npm draco-terser-webpack-plugin-hermes-corvus |
Malicious release: Malicious code in duplex-airbnb-canopus-gammarayburst (npm) MAL-2025-186644 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-airbnb-canopus-gammarayburst |
Malicious release: Malicious code in duplex-eslint-plugin-apex-taphonomy (npm) MAL-2025-186645 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-eslint-plugin-apex-taphonomy |
Malicious release: Malicious code in duplex-init-parcel-test (npm) MAL-2025-186646 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-init-parcel-test |
Malicious release: Malicious code in duplex-lacerta-link-pipe (npm) MAL-2025-186647 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-lacerta-link-pipe |