Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in compile-validate-sandbox-node-async (npm) MAL-2025-186260 | Malicious | Not scored | 13 Nov, 2025 | npm compile-validate-sandbox-node-async |
Malicious release: Malicious code in compile-xi-small-star-decompress (npm) MAL-2025-186261 | Malicious | Not scored | 13 Nov, 2025 | npm compile-xi-small-star-decompress |
Malicious release: Malicious code in compress-async-rho-boolean-assert (npm) MAL-2025-186262 | Malicious | Not scored | 13 Nov, 2025 | npm compress-async-rho-boolean-assert |
Malicious release: Malicious code in compress-tau-enum-book-serialize (npm) MAL-2025-186263 | Malicious | Not scored | 13 Nov, 2025 | npm compress-tau-enum-book-serialize |
Malicious release: Malicious code in compress-water-cluster-slow-cat (npm) MAL-2025-186264 | Malicious | Not scored | 13 Nov, 2025 | npm compress-water-cluster-slow-cat |
Malicious release: Malicious code in concurrently-configstore-lyra-perseus (npm) MAL-2025-186265 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-configstore-lyra-perseus |
Malicious release: Malicious code in concurrently-fork-blazar-helios (npm) MAL-2025-186266 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-fork-blazar-helios |
Malicious release: Malicious code in concurrently-grus-vuepress-zenith (npm) MAL-2025-186267 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-grus-vuepress-zenith |
Malicious release: Malicious code in concurrently-hawkingradiation-tailwindcss-janus (npm) MAL-2025-186268 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-hawkingradiation-tailwindcss-janus |
Malicious release: Malicious code in concurrently-janus-equinox-spinner (npm) MAL-2025-186269 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-janus-equinox-spinner |
Malicious release: Malicious code in concurrently-janus-spinner-palynology (npm) MAL-2025-186270 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-janus-spinner-palynology |
Malicious release: Malicious code in concurrently-scripts-plutology-nightmare (npm) MAL-2025-186271 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-scripts-plutology-nightmare |
Malicious release: Malicious code in concurrently-ultra-protractor-paleoceanography (npm) MAL-2025-186272 | Malicious | Not scored | 13 Nov, 2025 | npm concurrently-ultra-protractor-paleoceanography |
Malicious release: Malicious code in config-cross-env-nova-bunyan (npm) MAL-2025-186273 | Malicious | Not scored | 13 Nov, 2025 | npm config-cross-env-nova-bunyan |
Malicious release: Malicious code in config-dactyl-foundation-sirius (npm) MAL-2025-186274 | Malicious | Not scored | 13 Nov, 2025 | npm config-dactyl-foundation-sirius |
Malicious release: Malicious code in config-darkenergy-heliophysics-quark (npm) MAL-2025-186275 | Malicious | Not scored | 13 Nov, 2025 | npm config-darkenergy-heliophysics-quark |
Malicious release: Malicious code in config-elara-leda-nucleosynthesis (npm) MAL-2025-186276 | Malicious | Not scored | 13 Nov, 2025 | npm config-elara-leda-nucleosynthesis |
Malicious release: Malicious code in config-event-install-lacerta (npm) MAL-2025-186277 | Malicious | Not scored | 13 Nov, 2025 | npm config-event-install-lacerta |
Malicious release: Malicious code in config-ophiuchus-levels-version (npm) MAL-2025-186278 | Malicious | Not scored | 13 Nov, 2025 | npm config-ophiuchus-levels-version |
Malicious release: Malicious code in config-pipe-promise-start (npm) MAL-2025-186279 | Malicious | Not scored | 13 Nov, 2025 | npm config-pipe-promise-start |
Malicious release: Malicious code in config-regulus-auth-ophiuchus (npm) MAL-2025-186280 | Malicious | Not scored | 13 Nov, 2025 | npm config-regulus-auth-ophiuchus |
Malicious release: Malicious code in config-xml-sirius-config (npm) MAL-2025-186281 | Malicious | Not scored | 13 Nov, 2025 | npm config-xml-sirius-config |
Malicious release: Malicious code in configstore-centaurus-writable-express (npm) MAL-2025-186282 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-centaurus-writable-express |
Malicious release: Malicious code in configstore-eslint-config-celeste-archaeometry (npm) MAL-2025-186283 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-eslint-config-celeste-archaeometry |
Malicious release: Malicious code in configstore-hermes-development-update (npm) MAL-2025-186284 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-hermes-development-update |
Malicious release: Malicious code in configstore-jabbah-koa-public (npm) MAL-2025-186285 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-jabbah-koa-public |
Malicious release: Malicious code in configstore-mensa-airbnb-quark (npm) MAL-2025-186286 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-mensa-airbnb-quark |
Malicious release: Malicious code in configstore-mongoose-interferometry-terser-webpack-plugin (npm) MAL-2025-186287 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-mongoose-interferometry-terser-webpack-plugin |
Malicious release: Malicious code in configstore-quark-sync-callback (npm) MAL-2025-186288 | Malicious | Not scored | 13 Nov, 2025 | npm configstore-quark-sync-callback |
Malicious release: Malicious code in container-async-awk-zeta-runtime (npm) MAL-2025-186289 | Malicious | Not scored | 13 Nov, 2025 | npm container-async-awk-zeta-runtime |
Malicious release: Malicious code in container-bundle-wind-private-resolve (npm) MAL-2025-186290 | Malicious | Not scored | 13 Nov, 2025 | npm container-bundle-wind-private-resolve |
Malicious release: Malicious code in container-encrypt-kappa-virtualize-old (npm) MAL-2025-186291 | Malicious | Not scored | 13 Nov, 2025 | npm container-encrypt-kappa-virtualize-old |
Malicious release: Malicious code in container-error-sanitize-authenticate-sigma (npm) MAL-2025-186292 | Malicious | Not scored | 13 Nov, 2025 | npm container-error-sanitize-authenticate-sigma |
Malicious release: Malicious code in container-tree-signal-notify-permission (npm) MAL-2025-186293 | Malicious | Not scored | 13 Nov, 2025 | npm container-tree-signal-notify-permission |
Malicious release: Malicious code in container-void-virtualize-transpile-try (npm) MAL-2025-186294 | Malicious | Not scored | 13 Nov, 2025 | npm container-void-virtualize-transpile-try |
Malicious release: Malicious code in convict-axios-cosmogenic-miranda (npm) MAL-2025-186295 | Malicious | Not scored | 13 Nov, 2025 | npm convict-axios-cosmogenic-miranda |
Malicious release: Malicious code in convict-miranda-deimos-astrochemistry (npm) MAL-2025-186296 | Malicious | Not scored | 13 Nov, 2025 | npm convict-miranda-deimos-astrochemistry |
Malicious release: Malicious code in convict-private-cors-superagent (npm) MAL-2025-186297 | Malicious | Not scored | 13 Nov, 2025 | npm convict-private-cors-superagent |
Malicious release: Malicious code in convict-quantum-hermes-enif (npm) MAL-2025-186298 | Malicious | Not scored | 13 Nov, 2025 | npm convict-quantum-hermes-enif |
Malicious release: Malicious code in convict-spawn-gravitationalwave-stream (npm) MAL-2025-186299 | Malicious | Not scored | 13 Nov, 2025 | npm convict-spawn-gravitationalwave-stream |
Malicious release: Malicious code in convict-thuban-blackhole-chromedriver (npm) MAL-2025-186300 | Malicious | Not scored | 13 Nov, 2025 | npm convict-thuban-blackhole-chromedriver |
Malicious release: Malicious code in convict-ultra-paleoceanography-carpo (npm) MAL-2025-186301 | Malicious | Not scored | 13 Nov, 2025 | npm convict-ultra-paleoceanography-carpo |
Malicious release: Malicious code in convict-writable-webpack-cosmogenic (npm) MAL-2025-186302 | Malicious | Not scored | 13 Nov, 2025 | npm convict-writable-webpack-cosmogenic |
Malicious release: Malicious code in cordelia-async-chariklo-farout (npm) MAL-2025-186303 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-async-chariklo-farout |
Malicious release: Malicious code in cordelia-babel-on-proxima (npm) MAL-2025-186304 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-babel-on-proxima |
Malicious release: Malicious code in cordelia-cors-lyra-accretion (npm) MAL-2025-186305 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-cors-lyra-accretion |
Malicious release: Malicious code in cordelia-dione-hyperion-superposition (npm) MAL-2025-186306 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-dione-hyperion-superposition |
Malicious release: Malicious code in cordelia-indus-cors-dotenv-safe (npm) MAL-2025-186307 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-indus-cors-dotenv-safe |
Malicious release: Malicious code in cordelia-solis-markdown-xerxes (npm) MAL-2025-186308 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-solis-markdown-xerxes |
Malicious release: Malicious code in cordelia-websockets-yakutsk-quark (npm) MAL-2025-186309 | Malicious | Not scored | 13 Nov, 2025 | npm cordelia-websockets-yakutsk-quark |