Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in elf-stats-ginger-wreath-646 (npm) MAL-2025-192303 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-ginger-wreath-646 |
Malicious release: Malicious code in sd-notexsit (npm) MAL-2025-192348 | Malicious | Not scored | 04 Dec, 2025 | npm sd-notexsit |
Malicious release: Malicious code in beep-types (npm) GHSA-29c6-m59j-mpj7, MAL-2025-192296 | Malicious | Not scored | 04 Dec, 2025 | npm beep-types |
Malicious release: Malicious code in elf-stats-bright-cocoa-293 (npm) GHSA-486w-96w2-x9jf, MAL-2025-192297 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-bright-cocoa-293 |
Malicious release: Malicious code in elf-stats-candlelit-marshmallow-663 (npm) GHSA-53p4-4v76-pxf5, MAL-2025-192298 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-candlelit-marshmallow-663 |
Malicious release: Malicious code in elf-stats-mulled-ornament-810 (npm) GHSA-7fvr-p773-hqhr, MAL-2025-192301 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-mulled-ornament-810 |
Malicious release: Malicious code in elf-stats-lanternlit-snowman-834 (npm) GHSA-w8c6-v9jv-g985, MAL-2025-192299 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-lanternlit-snowman-834 |
Malicious release: Malicious code in elf-stats-marzipan-cocoa-562 (npm) GHSA-xf3h-9rpq-qxc6, MAL-2025-192300 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-marzipan-cocoa-562 |
Malicious release: Malicious code in elf-stats-jubilant-ornament-641 (npm) GHSA-p68c-437g-m8f7, MAL-2025-192295 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-jubilant-ornament-641 |
Malicious release: Malicious code in volume-viz (npm) MAL-2025-192372 | Malicious | Not scored | 04 Dec, 2025 | npm volume-viz |
Malicious release: Malicious code in elf-stats-festive-sparkler-275 (npm) GHSA-cqjm-gc5c-7gh9, MAL-2025-192294 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-festive-sparkler-275 |
Malicious release: Malicious code in email-regexed (npm) GHSA-65w3-9r4v-34p8, MAL-2025-192291 | Malicious | Not scored | 03 Dec, 2025 | npm email-regexed |
Malicious release: Malicious code in email-validated (npm) GHSA-p7fh-g5c8-3wj4, MAL-2025-192292 | Malicious | Not scored | 03 Dec, 2025 | npm email-validated |
Malicious release: Malicious code in tailwindcss-animation-css (npm) GHSA-rvc7-g7f8-qr5g, MAL-2025-192293 | Malicious | Not scored | 03 Dec, 2025 | npm tailwindcss-animation-css |
Malicious release: Malicious code in dotenv-intend (npm) GHSA-623w-pf6v-gcgv, MAL-2025-192290, SNYK-JS-DOTENVINTEND-14152253 | Malicious | Not scored | 03 Dec, 2025 | npm dotenv-intend |
Malicious release: Malicious code in chai-test-await (npm) GHSA-6hwv-6pq9-wvvc, MAL-2025-192289, SNYK-JS-CHAITESTAWAIT-14152247 | Malicious | Not scored | 03 Dec, 2025 | npm chai-test-await |
Malicious release: Malicious code in self-service-portal-prod (npm) GHSA-6663-4rqc-qqhf, MAL-2025-192288 | Malicious | Not scored | 03 Dec, 2025 | npm self-service-portal-prod |
mcp-server-kubernetes has potential security issue in exec_in_pod tool CVE-2025-66404, GHSA-wvxp-jp4w-w8wg | High | 1.5% | 03 Dec, 2025 | npm mcp-server-kubernetes |
Malicious release: Malicious code in elf-stats-frostbitten-pantry-235 (npm) MAL-2025-192281 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-frostbitten-pantry-235 |
Malicious release: Malicious code in elf-stats-candystriped-chimney-879 (npm) MAL-2025-192279 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-candystriped-chimney-879 |
Malicious release: Malicious code in elf-stats-aurora-toy-659 (npm) MAL-2025-192278 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-aurora-toy-659 |
Malicious release: Malicious code in elf-stats-evergreen-pantry-410 (npm) MAL-2025-192280 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-evergreen-pantry-410 |
Malicious release: Malicious code in elf-stats-sprucey-fireplace-355 (npm) MAL-2025-192284 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sprucey-fireplace-355 |
Malicious release: Malicious code in elf-stats-joyous-train-754 (npm) MAL-2025-192282 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-joyous-train-754 |
Malicious release: Malicious code in elf-stats-sparkly-candy-805 (npm) MAL-2025-192283 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sparkly-candy-805 |
Malicious release: Malicious code in elf-stats-sugarplum-cookiejar-287 (npm) MAL-2025-192285 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sugarplum-cookiejar-287 |
Malicious release: Malicious code in elf-stats-tinsel-sparkler-289 (npm) MAL-2025-192286 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-tinsel-sparkler-289 |
Malicious release: Malicious code in elf-stats-twinkling-ribbon-344 (npm) MAL-2025-192287 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-twinkling-ribbon-344 |
Malicious release: Malicious code in elf-stats-mulled-nightcap-782 (npm) MAL-2025-192274 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-mulled-nightcap-782 |
Malicious release: Malicious code in @bhyolken/echotest (npm) MAL-2025-192271 | Malicious | Not scored | 03 Dec, 2025 | npm @bhyolken/echotest |
Malicious release: Malicious code in elf-stats-snowy-northstar-860 (npm) MAL-2025-192276 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-snowy-northstar-860 |
Malicious release: Malicious code in elf-stats-candystriped-ornament-933 (npm) MAL-2025-192272 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-candystriped-ornament-933 |
Malicious release: Malicious code in elf-stats-merry-cookiejar-139 (npm) MAL-2025-192273 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-merry-cookiejar-139 |
Malicious release: Malicious code in elf-stats-sugarplum-ribbon-151 (npm) MAL-2025-192277 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sugarplum-ribbon-151 |
Malicious release: Malicious code in elf-stats-sleighing-mailbag-621 (npm) MAL-2025-192275 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sleighing-mailbag-621 |
React Server Components are Vulnerable to RCE GHSA-fmh4-wr37-44fp | Critical | Not scored | 03 Dec, 2025 | npm @vitejs/plugin-rsc |
Next.js is vulnerable to RCE in React flight protocol GHSA-9qr9-h5gf-34mp | Critical | Not scored | 03 Dec, 2025 | npm next |
Malicious release: Malicious code in elf-stats-nutmeg-garland-645 (npm) MAL-2025-192263 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-nutmeg-garland-645 |
Malicious release: Malicious code in elf-stats-silvered-star-676 (npm) MAL-2025-192266 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-silvered-star-676 |
Malicious release: Malicious code in elf-stats-snowdusted-stockpile-595 (npm) MAL-2025-192268 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-snowdusted-stockpile-595 |
Malicious release: Malicious code in elf-stats-jolly-workshop-110 (npm) MAL-2025-192261 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-jolly-workshop-110 |
Malicious release: Malicious code in elf-stats-snowdusted-lantern-234 (npm) MAL-2025-192267 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-snowdusted-lantern-234 |
Malicious release: Malicious code in elf-stats-tinsel-candy-605 (npm) MAL-2025-192270 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-tinsel-candy-605 |
Malicious release: Malicious code in elf-stats-flickering-ornament-344 (npm) MAL-2025-192260 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-flickering-ornament-344 |
Malicious release: Malicious code in elf-stats-joyous-hollyberry-121 (npm) MAL-2025-192262 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-joyous-hollyberry-121 |
Malicious release: Malicious code in elf-stats-rooftop-cocoa-966 (npm) MAL-2025-192264 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-rooftop-cocoa-966 |
Malicious release: Malicious code in elf-stats-rooftop-fireplace-499 (npm) MAL-2025-192265 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-rooftop-fireplace-499 |
Malicious release: Malicious code in elf-stats-snowdusted-train-837 (npm) MAL-2025-192269 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-snowdusted-train-837 |
Malicious release: Malicious code in elf-stats-festive-workshop-566 (npm) MAL-2025-192255 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-festive-workshop-566 |
Malicious release: Malicious code in elf-stats-midnight-saddlebag-720 (npm) MAL-2025-192257 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-midnight-saddlebag-720 |