Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dotenv-safe-nodemon-ariel-petrology (npm) MAL-2025-186622 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-nodemon-ariel-petrology |
Malicious release: Malicious code in dotenv-safe-norma-vuetify-paleomagnetism (npm) MAL-2025-186623 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-norma-vuetify-paleomagnetism |
Malicious release: Malicious code in dotenv-safe-parsec-soap-polaris (npm) MAL-2025-186624 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-parsec-soap-polaris |
Malicious release: Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm) MAL-2025-186625 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-pino-pretty-terser-postcss |
Malicious release: Malicious code in dotenv-safe-sedimentology-wolf-singularity (npm) MAL-2025-186626 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-sedimentology-wolf-singularity |
Malicious release: Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm) MAL-2025-186627 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-safe-vortex-meissa-webdriverio |
Malicious release: Malicious code in dotenv-sedna-inflation-figures (npm) MAL-2025-186628 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-sedna-inflation-figures |
Malicious release: Malicious code in dotenv-semantic-ui-fusion-hexo (npm) MAL-2025-186629 | Malicious | Not scored | 13 Nov, 2025 | npm dotenv-semantic-ui-fusion-hexo |
Malicious release: Malicious code in double-benchmark-pipe-hash-virtualize (npm) MAL-2025-186630 | Malicious | Not scored | 13 Nov, 2025 | npm double-benchmark-pipe-hash-virtualize |
Malicious release: Malicious code in double-decode-encrypt-cache-bundle (npm) MAL-2025-186631 | Malicious | Not scored | 13 Nov, 2025 | npm double-decode-encrypt-cache-bundle |
Malicious release: Malicious code in double-file-encode-moon-virtualize (npm) MAL-2025-186632 | Malicious | Not scored | 13 Nov, 2025 | npm double-file-encode-moon-virtualize |
Malicious release: Malicious code in double-final-proxy-gamma-alpha (npm) MAL-2025-186633 | Malicious | Not scored | 13 Nov, 2025 | npm double-final-proxy-gamma-alpha |
Malicious release: Malicious code in double-grid-resolve-data-log (npm) MAL-2025-186634 | Malicious | Not scored | 13 Nov, 2025 | npm double-grid-resolve-data-log |
Malicious release: Malicious code in double-rain-protected-import-monitor (npm) MAL-2025-186635 | Malicious | Not scored | 13 Nov, 2025 | npm double-rain-protected-import-monitor |
Malicious release: Malicious code in double-uglify-long-static-cron (npm) MAL-2025-186636 | Malicious | Not scored | 13 Nov, 2025 | npm double-uglify-long-static-cron |
Malicious release: Malicious code in draco-convict-carina-superagent (npm) MAL-2025-186637 | Malicious | Not scored | 13 Nov, 2025 | npm draco-convict-carina-superagent |
Malicious release: Malicious code in draco-cygnus-repository-aurora (npm) MAL-2025-186638 | Malicious | Not scored | 13 Nov, 2025 | npm draco-cygnus-repository-aurora |
Malicious release: Malicious code in draco-gacrux-carpo-await (npm) MAL-2025-186639 | Malicious | Not scored | 13 Nov, 2025 | npm draco-gacrux-carpo-await |
Malicious release: Malicious code in draco-hermes-betelgeuse-auth0 (npm) MAL-2025-186640 | Malicious | Not scored | 13 Nov, 2025 | npm draco-hermes-betelgeuse-auth0 |
Malicious release: Malicious code in draco-less-polaris-miranda (npm) MAL-2025-186641 | Malicious | Not scored | 13 Nov, 2025 | npm draco-less-polaris-miranda |
Malicious release: Malicious code in draco-quasarjet-envconfig-technocracy (npm) MAL-2025-186642 | Malicious | Not scored | 13 Nov, 2025 | npm draco-quasarjet-envconfig-technocracy |
Malicious release: Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm) MAL-2025-186643 | Malicious | Not scored | 13 Nov, 2025 | npm draco-terser-webpack-plugin-hermes-corvus |
Malicious release: Malicious code in duplex-airbnb-canopus-gammarayburst (npm) MAL-2025-186644 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-airbnb-canopus-gammarayburst |
Malicious release: Malicious code in duplex-eslint-plugin-apex-taphonomy (npm) MAL-2025-186645 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-eslint-plugin-apex-taphonomy |
Malicious release: Malicious code in duplex-init-parcel-test (npm) MAL-2025-186646 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-init-parcel-test |
Malicious release: Malicious code in duplex-lacerta-link-pipe (npm) MAL-2025-186647 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-lacerta-link-pipe |
Malicious release: Malicious code in duplex-parcel-nodejs-membrane (npm) MAL-2025-186648 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-parcel-nodejs-membrane |
Malicious release: Malicious code in duplex-request-astrometry-titan (npm) MAL-2025-186649 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-request-astrometry-titan |
Malicious release: Malicious code in duplex-tailwindcss-nestjs-polaris (npm) MAL-2025-186650 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-tailwindcss-nestjs-polaris |
Malicious release: Malicious code in duplex-version-polaris-cosmos (npm) MAL-2025-186651 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-version-polaris-cosmos |
Malicious release: Malicious code in dynamo-ganymede-init-sequelize (npm) MAL-2025-186652 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-ganymede-init-sequelize |
Malicious release: Malicious code in dynamo-leda-registry-unuk (npm) MAL-2025-186653 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-leda-registry-unuk |
Malicious release: Malicious code in dynamo-mini-css-extract-plugin-cosmicsilence-frontend (npm) MAL-2025-186654 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-mini-css-extract-plugin-cosmicsilence-frontend |
Malicious release: Malicious code in dynamo-run-script-jasmine-kuiperbelt (npm) MAL-2025-186655 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-run-script-jasmine-kuiperbelt |
Malicious release: Malicious code in dynamo-schema-higgs-geoarchaeology (npm) MAL-2025-186656 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-schema-higgs-geoarchaeology |
Malicious release: Malicious code in dynamo-sirius-changelog-string (npm) MAL-2025-186657 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-sirius-changelog-string |
Malicious release: Malicious code in dysonswarm-apex-graphql-module (npm) MAL-2025-186658 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-apex-graphql-module |
Malicious release: Malicious code in dysonswarm-gulp-dendrochronology-iota (npm) MAL-2025-186659 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-gulp-dendrochronology-iota |
Malicious release: Malicious code in dysonswarm-joviology-node-sass-troposphere (npm) MAL-2025-186660 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-joviology-node-sass-troposphere |
Malicious release: Malicious code in dysonswarm-lacerta-unuk-dynamo (npm) MAL-2025-186661 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-lacerta-unuk-dynamo |
Malicious release: Malicious code in dysonswarm-loop-command-uranology (npm) MAL-2025-186662 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-loop-command-uranology |
Malicious release: Malicious code in dysonswarm-public-mutation-sagitta (npm) MAL-2025-186663 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-public-mutation-sagitta |
Malicious release: Malicious code in earth-omega-epsilon-error-compress (npm) MAL-2025-186664 | Malicious | Not scored | 13 Nov, 2025 | npm earth-omega-epsilon-error-compress |
Malicious release: Malicious code in earth-protected-gamma-test-star (npm) MAL-2025-186665 | Malicious | Not scored | 13 Nov, 2025 | npm earth-protected-gamma-test-star |
Malicious release: Malicious code in earth-small-scale-simulate-static (npm) MAL-2025-186666 | Malicious | Not scored | 13 Nov, 2025 | npm earth-small-scale-simulate-static |
Malicious release: Malicious code in earth-visualize-abstract-beta-pipe (npm) MAL-2025-186667 | Malicious | Not scored | 13 Nov, 2025 | npm earth-visualize-abstract-beta-pipe |
Malicious release: Malicious code in easy-cron-secure-thread-sanitize (npm) MAL-2025-186668 | Malicious | Not scored | 13 Nov, 2025 | npm easy-cron-secure-thread-sanitize |
Malicious release: Malicious code in easy-emulate-try-psi-balance (npm) MAL-2025-186669 | Malicious | Not scored | 13 Nov, 2025 | npm easy-emulate-try-psi-balance |
Malicious release: Malicious code in easy-interpret-big-proxy-scale (npm) MAL-2025-186670 | Malicious | Not scored | 13 Nov, 2025 | npm easy-interpret-big-proxy-scale |
Malicious release: Malicious code in easy-kernel-deserialize-public-await (npm) MAL-2025-186671 | Malicious | Not scored | 13 Nov, 2025 | npm easy-kernel-deserialize-public-await |