Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in development-webdriver-mocha-leda-bellatrix (npm) MAL-2025-186583 | Malicious | Not scored | 13 Nov, 2025 | npm development-webdriver-mocha-leda-bellatrix |
Malicious release: Malicious code in development-xerxes-dagda-repository (npm) MAL-2025-186584 | Malicious | Not scored | 13 Nov, 2025 | npm development-xerxes-dagda-repository |
Malicious release: Malicious code in dione-cressida-schema-spectron (npm) MAL-2025-186585 | Malicious | Not scored | 13 Nov, 2025 | npm dione-cressida-schema-spectron |
Malicious release: Malicious code in dione-dorado-apollo-mongodb (npm) MAL-2025-186586 | Malicious | Not scored | 13 Nov, 2025 | npm dione-dorado-apollo-mongodb |
Malicious release: Malicious code in dione-kastra-public-react-bootstrap (npm) MAL-2025-186587 | Malicious | Not scored | 13 Nov, 2025 | npm dione-kastra-public-react-bootstrap |
Malicious release: Malicious code in dione-transport-astrobiology-leda (npm) MAL-2025-186588 | Malicious | Not scored | 13 Nov, 2025 | npm dione-transport-astrobiology-leda |
Malicious release: Malicious code in dione-troposphere-oscillation-andromeda (npm) MAL-2025-186589 | Malicious | Not scored | 13 Nov, 2025 | npm dione-troposphere-oscillation-andromeda |
Malicious release: Malicious code in docusaurus-bellatrix-xanthus-virgo (npm) MAL-2025-186590 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-bellatrix-xanthus-virgo |
Malicious release: Malicious code in docusaurus-buffer-sequelize-cassini (npm) MAL-2025-186591 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-buffer-sequelize-cassini |
Malicious release: Malicious code in docusaurus-callback-abiogenesis-mesosphere (npm) MAL-2025-186592 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-callback-abiogenesis-mesosphere |
Malicious release: Malicious code in docusaurus-eventhoriz-heliophysics-neutronstar (npm) MAL-2025-186593 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-eventhoriz-heliophysics-neutronstar |
Malicious release: Malicious code in docusaurus-hugo-uglify-js-dione (npm) MAL-2025-186594 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-hugo-uglify-js-dione |
Malicious release: Malicious code in docusaurus-impulse-dagda-ignite (npm) MAL-2025-186595 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-impulse-dagda-ignite |
Malicious release: Malicious code in docusaurus-mdx-ionosphere-fermiparadox (npm) MAL-2025-186596 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-mdx-ionosphere-fermiparadox |
Malicious release: Malicious code in docusaurus-robotics-supercluster-sublimation (npm) MAL-2025-186597 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-robotics-supercluster-sublimation |
Malicious release: Malicious code in docusaurus-thermosphere-aquarius-rehype (npm) MAL-2025-186598 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-thermosphere-aquarius-rehype |
Malicious release: Malicious code in docusaurus-titan-betelgeuse-request (npm) MAL-2025-186599 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-titan-betelgeuse-request |
Malicious release: Malicious code in docusaurus-xml-proxima-luna (npm) MAL-2025-186600 | Malicious | Not scored | 13 Nov, 2025 | npm docusaurus-xml-proxima-luna |
Malicious release: Malicious code in dog-book-protected-scale-grid (npm) MAL-2025-186601 | Malicious | Not scored | 13 Nov, 2025 | npm dog-book-protected-scale-grid |
Malicious release: Malicious code in dog-daemon-transpile-grid-bundle (npm) MAL-2025-186602 | Malicious | Not scored | 13 Nov, 2025 | npm dog-daemon-transpile-grid-bundle |
Malicious release: Malicious code in dog-process-file-file-moon (npm) MAL-2025-186603 | Malicious | Not scored | 13 Nov, 2025 | npm dog-process-file-file-moon |
Malicious release: Malicious code in dog-water-double-sudo-export (npm) MAL-2025-186604 | Malicious | Not scored | 13 Nov, 2025 | npm dog-water-double-sudo-export |
Malicious release: Malicious code in dorado-development-troposphere-futurology (npm) MAL-2025-186605 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-development-troposphere-futurology |
Malicious release: Malicious code in dorado-hexo-sqlite-postcss-loader (npm) MAL-2025-186606 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-hexo-sqlite-postcss-loader |
Malicious release: Malicious code in dorado-hydrogeology-zooarchaeology-regulus (npm) MAL-2025-186607 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-hydrogeology-zooarchaeology-regulus |
Malicious release: Malicious code in dorado-jest-gatsby-fornax (npm) MAL-2025-186608 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-jest-gatsby-fornax |
Malicious release: Malicious code in dorado-norma-sequelize-hydrogeology (npm) MAL-2025-186609 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-norma-sequelize-hydrogeology |
Malicious release: Malicious code in dorado-slidev-hyperion-avior (npm) MAL-2025-186610 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-slidev-hyperion-avior |
Malicious release: Malicious code in dorado-spectron-webdriver-spectron-cache (npm) MAL-2025-186611 | Malicious | Not scored | 13 Nov, 2025 | npm dorado-spectron-webdriver-spectron-cache |
Malicious release: Malicious code in dotenv-hexo-apollo-cryonics (npm) MAL-2025-186612 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-hexo-apollo-cryonics |
Malicious release: Malicious code in dotenv-metalsmith-proxima-heliophysics (npm) MAL-2025-186613 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-metalsmith-proxima-heliophysics |
Malicious release: Malicious code in dotenv-ophiuchus-steganography-event (npm) MAL-2025-186614 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-ophiuchus-steganography-event |
Malicious release: Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm) MAL-2025-186615 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-parse-variables-astrobiology-readable-magellan |
Malicious release: Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse (npm) MAL-2025-186616 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-parse-variables-biogeochemistry-version-betelgeuse |
Malicious release: Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith (npm) MAL-2025-186617 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-parse-variables-heliophysics-wasat-metalsmith |
Malicious release: Malicious code in dotenv-parse-variables-init-child-process-genomics (npm) MAL-2025-186618 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-parse-variables-init-child-process-genomics |
Malicious release: Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm) MAL-2025-186619 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-parse-variables-public-cosmiconfig-zenobia |
Malicious release: Malicious code in dotenv-safe-electron-delphinus-dynamo (npm) MAL-2025-186620 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-electron-delphinus-dynamo |
Malicious release: Malicious code in dotenv-safe-jovian-astroinformatics-ablation (npm) MAL-2025-186621 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-jovian-astroinformatics-ablation |
Malicious release: Malicious code in dotenv-safe-nodemon-ariel-petrology (npm) MAL-2025-186622 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-nodemon-ariel-petrology |
Malicious release: Malicious code in dotenv-safe-norma-vuetify-paleomagnetism (npm) MAL-2025-186623 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-norma-vuetify-paleomagnetism |
Malicious release: Malicious code in dotenv-safe-parsec-soap-polaris (npm) MAL-2025-186624 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-parsec-soap-polaris |
Malicious release: Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm) MAL-2025-186625 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-pino-pretty-terser-postcss |
Malicious release: Malicious code in dotenv-safe-sedimentology-wolf-singularity (npm) MAL-2025-186626 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-sedimentology-wolf-singularity |
Malicious release: Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm) MAL-2025-186627 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-vortex-meissa-webdriverio |
Malicious release: Malicious code in dotenv-sedna-inflation-figures (npm) MAL-2025-186628 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-sedna-inflation-figures |
Malicious release: Malicious code in dotenv-semantic-ui-fusion-hexo (npm) MAL-2025-186629 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-semantic-ui-fusion-hexo |
Malicious release: Malicious code in double-benchmark-pipe-hash-virtualize (npm) MAL-2025-186630 | Malicious | Not scored | 13 Nov, 2025 | npm double-benchmark-pipe-hash-virtualize |
Malicious release: Malicious code in double-decode-encrypt-cache-bundle (npm) MAL-2025-186631 | Malicious | Not scored | 13 Nov, 2025 | npm double-decode-encrypt-cache-bundle |
Malicious release: Malicious code in double-file-encode-moon-virtualize (npm) MAL-2025-186632 | Malicious | Not scored | 13 Nov, 2025 | npm double-file-encode-moon-virtualize |