Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in elf-stats-wintry-cocoa-831 (npm) MAL-2025-192243 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-wintry-cocoa-831 |
Malicious release: Malicious code in elf-stats-nutmeg-cocoa-967 (npm) MAL-2025-192223 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-nutmeg-cocoa-967 |
Malicious release: Malicious code in hast-util-to-mdast9 (npm) GHSA-28w3-67mg-fxwj, MAL-2025-192244 | Malicious | Not scored | 03 Dec, 2025 | npm hast-util-to-mdast9 |
Malicious release: Malicious code in elf-stats-cocoa-ribbon-476 (npm) MAL-2025-192203 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cocoa-ribbon-476 |
Malicious release: Malicious code in elf-stats-merry-garland-548 (npm) MAL-2025-192201 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-merry-garland-548 |
Malicious release: Malicious code in elf-stats-sleighing-stocking-579 (npm) MAL-2025-192202 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sleighing-stocking-579 |
Claude Code Command Validation Bypass Allows Arbitrary Code Execution CVE-2025-66032, GHSA-xq4m-mc3c-vvg3 | High | 0.7% | 03 Dec, 2025 | npm @anthropic-ai/claude-code |
React Server Components are Vulnerable to RCE CVE-2025-55182, GHSA-fv66-9v8q-g76r | CriticalExploited | 99.7% | 03 Dec, 2025 | npm react-server-dom-parcel npm react-server-dom-turbopack npm react-server-dom-webpack |
Malicious release: Malicious code in elf-stats-ginger-reindeer-411 (npm) MAL-2025-192212 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-ginger-reindeer-411 |
Malicious release: Malicious code in elf-stats-candlelit-reindeer-881 (npm) GHSA-39rc-w9m8-hj3g, MAL-2025-191995 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-candlelit-reindeer-881 |
Malicious release: Malicious code in elf-stats-sparkly-cushion-340 (npm) GHSA-443f-9rv5-jgm4, MAL-2025-192155 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sparkly-cushion-340 |
Malicious release: Malicious code in elf-stats-mulled-wishlist-789 (npm) GHSA-483j-jcm9-gmm9, MAL-2025-192103 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-mulled-wishlist-789 |
Malicious release: Malicious code in elf-stats-marzipan-muffin-733 (npm) GHSA-5g7p-3m53-vj2w, MAL-2025-192083 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-marzipan-muffin-733 |
Malicious release: Malicious code in elf-stats-whimsical-snowflake-250 (npm) GHSA-66j9-432x-99f2, MAL-2025-192193 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-whimsical-snowflake-250 |
Malicious release: Malicious code in elf-stats-sugarplum-fireplace-278 (npm) GHSA-7wfw-jp2g-j55h, MAL-2025-192171 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sugarplum-fireplace-278 |
Malicious release: Malicious code in elf-stats-gingersnap-reindeer-987 (npm) GHSA-95g5-wmgw-3jc2, MAL-2025-192056 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-gingersnap-reindeer-987 |
Malicious release: Malicious code in elf-stats-ember-hammer-340 (npm) GHSA-hrx2-ghr5-gf59, MAL-2025-192016 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-ember-hammer-340 |
Malicious release: Malicious code in elf-stats-rooftop-hammer-580 (npm) GHSA-jmx6-g2xr-f5f3, MAL-2025-192124 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-rooftop-hammer-580 |
Malicious release: Malicious code in elf-stats-ginger-icicle-707 (npm) GHSA-q42p-69cm-fc4q, MAL-2025-192052 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-ginger-icicle-707 |
Malicious release: Malicious code in elf-stats-piney-icicle-501 (npm) GHSA-vhqc-7qg9-xggj, MAL-2025-192117 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-piney-icicle-501 |
Malicious release: Malicious code in elf-stats-fuzzy-marshmallow-280 (npm) GHSA-w88m-v6f8-pw97, MAL-2025-192045 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-fuzzy-marshmallow-280 |
Malicious release: Malicious code in elf-stats-aurora-candy-291 (npm) MAL-2025-191988 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-aurora-candy-291 |
Malicious release: Malicious code in elf-stats-aurora-garland-513 (npm) MAL-2025-191989 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-aurora-garland-513 |
Malicious release: Malicious code in elf-stats-aurora-workbench-513 (npm) MAL-2025-191990 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-aurora-workbench-513 |
Malicious release: Malicious code in elf-stats-aurora-workbench-5l3 (npm) MAL-2025-191991 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-aurora-workbench-5l3 |
Malicious release: Malicious code in elf-stats-bright-bow-377 (npm) MAL-2025-191992 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-bright-bow-377 |
Malicious release: Malicious code in elf-stats-bright-star-712 (npm) MAL-2025-191994 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-bright-star-712 |
Malicious release: Malicious code in elf-stats-candlelit-toy-571 (npm) MAL-2025-191996 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-candlelit-toy-571 |
Malicious release: Malicious code in elf-stats-candystriped-hollyberry-986 (npm) MAL-2025-191997 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-candystriped-hollyberry-986 |
Malicious release: Malicious code in elf-stats-candystriped-lantern-205 (npm) MAL-2025-191998 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-candystriped-lantern-205 |
Malicious release: Malicious code in elf-stats-candystriped-saddlebag-217 (npm) MAL-2025-191999 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-candystriped-saddlebag-217 |
Malicious release: Malicious code in elf-stats-caroling-hollyberry-628 (npm) MAL-2025-192000 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-caroling-hollyberry-628 |
Malicious release: Malicious code in elf-stats-caroling-sleigh-970 (npm) MAL-2025-192001 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-caroling-sleigh-970 |
Malicious release: Malicious code in elf-stats-caroling-toy-109 (npm) MAL-2025-192002 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-caroling-toy-109 |
Malicious release: Malicious code in elf-stats-cheery-bell-343 (npm) MAL-2025-192003 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cheery-bell-343 |
Malicious release: Malicious code in elf-stats-cheery-chimney-392 (npm) MAL-2025-192004 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cheery-chimney-392 |
Malicious release: Malicious code in elf-stats-cheery-fireplace-598 (npm) MAL-2025-192005 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cheery-fireplace-598 |
Malicious release: Malicious code in elf-stats-cheery-satchel-119 (npm) MAL-2025-192006 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cheery-satchel-119 |
Malicious release: Malicious code in elf-stats-cocoa-muffin-395 (npm) MAL-2025-192007 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cocoa-muffin-395 |
Malicious release: Malicious code in elf-stats-cocoa-northstar-632 (npm) MAL-2025-192008 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cocoa-northstar-632 |
Malicious release: Malicious code in elf-stats-cocoa-reindeer-663 (npm) MAL-2025-192009 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cocoa-reindeer-663 |
Malicious release: Malicious code in elf-stats-cocoa-train-606 (npm) MAL-2025-192010 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cocoa-train-606 |
Malicious release: Malicious code in elf-stats-cocoa-train-606-pwn (npm) MAL-2025-192011 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cocoa-train-606-pwn |
Malicious release: Malicious code in elf-stats-cosy-pantry-344 (npm) MAL-2025-192012 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cosy-pantry-344 |
Malicious release: Malicious code in elf-stats-cosy-wishlist-811 (npm) MAL-2025-192013 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cosy-wishlist-811 |
Malicious release: Malicious code in elf-stats-cranberry-icicle-864 (npm) MAL-2025-192014 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cranberry-icicle-864 |
Malicious release: Malicious code in elf-stats-cranberry-mailbag-505 (npm) MAL-2025-192015 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cranberry-mailbag-505 |
Malicious release: Malicious code in elf-stats-ember-muffin-717 (npm) MAL-2025-192017 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-ember-muffin-717 |
Malicious release: Malicious code in elf-stats-ember-stockpile-641 (npm) MAL-2025-192018 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-ember-stockpile-641 |
Malicious release: Malicious code in elf-stats-evergreen-bow-653 (npm) MAL-2025-192019 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-evergreen-bow-653 |