Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in elf-stats-twinkling-wreath-730 (npm) MAL-2025-192184 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-twinkling-wreath-730 |
Malicious release: Malicious code in elf-stats-velvet-cocoa-992 (npm) MAL-2025-192185 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-velvet-cocoa-992 |
Malicious release: Malicious code in elf-stats-velvet-ornament-935 (npm) MAL-2025-192186 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-velvet-ornament-935 |
Malicious release: Malicious code in elf-stats-whimsical-lantern-823 (npm) MAL-2025-192187 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-whimsical-lantern-823 |
Malicious release: Malicious code in elf-stats-whimsical-ledger-767 (npm) MAL-2025-192188 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-whimsical-ledger-767 |
Malicious release: Malicious code in elf-stats-whimsical-marshmallow-212 (npm) MAL-2025-192189 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-whimsical-marshmallow-212 |
Malicious release: Malicious code in elf-stats-whimsical-marshmallow-258 (npm) MAL-2025-192190 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-whimsical-marshmallow-258 |
Malicious release: Malicious code in elf-stats-whimsical-muffin-613 (npm) MAL-2025-192191 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-whimsical-muffin-613 |
Malicious release: Malicious code in elf-stats-whimsical-rocket-922 (npm) MAL-2025-192192 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-whimsical-rocket-922 |
Malicious release: Malicious code in elf-stats-wintry-fir-892 (npm) MAL-2025-192194 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-wintry-fir-892 |
Malicious release: Malicious code in elf-stats-wintry-hammer-196 (npm) MAL-2025-192195 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-wintry-hammer-196 |
Malicious release: Malicious code in elf-stats-wintry-hollyberry-832 (npm) MAL-2025-192196 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-wintry-hollyberry-832 |
Malicious release: Malicious code in elf-stats-wintry-icicle-283 (npm) MAL-2025-192197 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-wintry-icicle-283 |
Malicious release: Malicious code in elf-stats-wintry-ornament-960 (npm) MAL-2025-192198 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-wintry-ornament-960 |
Malicious release: Malicious code in elf-stats-wintry-satchel-723 (npm) MAL-2025-192199 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-wintry-satchel-723 |
Malicious release: Malicious code in elf-stats-wintry-sled-578 (npm) MAL-2025-192200 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-wintry-sled-578 |
Malicious release: Malicious code in elf-stats-evergreen-snowglobe-961 (npm) MAL-2025-192026 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-evergreen-snowglobe-961 |
Malicious release: Malicious code in elf-stats-starlit-ribbon-255 (npm) MAL-2025-191987 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-starlit-ribbon-255 |
Malicious release: Malicious code in elf-stats-mulled-bauble-252 (npm) MAL-2025-191986 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-mulled-bauble-252 |
Malicious release: Malicious code in elf-stats-shimmering-lantern-668 (npm) MAL-2025-191985 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-shimmering-lantern-668 |
Malicious release: Malicious code in elf-stats-cosy-sleigh-356 (npm) GHSA-m24m-gvqg-6m35, MAL-2025-191980 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cosy-sleigh-356 |
Malicious release: Malicious code in elf-stats-ginger-hammer-326 (npm) MAL-2025-191982 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-ginger-hammer-326 |
Malicious release: Malicious code in elf-stats-frosty-candy-393 (npm) MAL-2025-191981 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-frosty-candy-393 |
Malicious release: Malicious code in elf-stats-sparkly-garland-970 (npm) MAL-2025-191984 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sparkly-garland-970 |
Malicious release: Malicious code in elf-stats-nutmeg-chimney-245 (npm) MAL-2025-191983 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-nutmeg-chimney-245 |
Malicious release: Malicious code in buffer-envjs (npm) GHSA-qc4x-5xxw-9c6v, MAL-2025-191979 | Malicious | Not scored | 03 Dec, 2025 | npm buffer-envjs |
Malicious release: Malicious code in elf-stats-cranberry-sleigh-853 (npm) MAL-2025-191978 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cranberry-sleigh-853 |
Malicious release: Malicious code in elf-stats-rooftop-giftbox-464 (npm) MAL-2025-192122 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-rooftop-giftbox-464 |
Malicious release: Malicious code in elf-stats-lanternlit-sled-571 (npm) MAL-2025-192078 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-lanternlit-sled-571 |
Malicious release: Malicious code in elf-stats-mistletoe-sparkler-211 (npm) MAL-2025-192099 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-mistletoe-sparkler-211 |
Malicious release: Malicious code in elf-stats-rooftop-stockpile-626 (npm) GHSA-3hg9-rgh9-x5j4, MAL-2025-191977 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-rooftop-stockpile-626 |
Malicious release: Malicious code in elf-stats-merry-cookiejar-987 (npm) MAL-2025-191975 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-merry-cookiejar-987 |
Malicious release: Malicious code in elf-stats-sleighing-bow-514 (npm) MAL-2025-191976 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sleighing-bow-514 |
Malicious release: Malicious code in elf-stats-wintry-northstar-674 (npm) MAL-2025-191974 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-wintry-northstar-674 |
Malicious release: Malicious code in elf-stats-bright-cushion-246 (npm) MAL-2025-191993 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-bright-cushion-246 |
Malicious release: Malicious code in elf-stats-fuzzy-fir-973 (npm) GHSA-868x-5vrm-qv2m, MAL-2025-191973 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-fuzzy-fir-973 |
Malicious release: Malicious code in elf-stats-evergreen-muffin-867 (npm) GHSA-6qx7-784r-ff4x, MAL-2025-192024 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-evergreen-muffin-867 |
Malicious release: Malicious code in @testfei/hallo-word (npm) GHSA-pvc8-vm69-c9g2, MAL-2025-191971 | Malicious | Not scored | 03 Dec, 2025 | npm @testfei/hallo-word |
Malicious release: Malicious code in karemm5 (npm) MAL-2025-191966 | Malicious | Not scored | 03 Dec, 2025 | npm karemm5 |
Malicious release: Malicious code in karemm6 (npm) MAL-2025-191967 | Malicious | Not scored | 03 Dec, 2025 | npm karemm6 |
Malicious release: Malicious code in karemm7 (npm) MAL-2025-191968 | Malicious | Not scored | 03 Dec, 2025 | npm karemm7 |
Malicious release: Malicious code in karemm3 (npm) MAL-2025-191965 | Malicious | Not scored | 03 Dec, 2025 | npm karemm3 |
Malicious release: Malicious code in @wb-drive/icons (npm) GHSA-pp9p-p4m6-rh8x, MAL-2025-191951 | Malicious | Not scored | 03 Dec, 2025 | npm @wb-drive/icons |
Malicious release: Malicious code in angular-trackjs (npm) GHSA-wm69-3896-655x, MAL-2025-191952 | Malicious | Not scored | 03 Dec, 2025 | npm angular-trackjs |
Malicious release: Malicious code in @hand-talk/yotta-icons (npm) MAL-2025-191950 | Malicious | Not scored | 03 Dec, 2025 | npm @hand-talk/yotta-icons |
Malicious release: Malicious code in elf-stats-cosy-stockpile-694 (npm) MAL-2025-191953 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cosy-stockpile-694 |
Malicious release: Malicious code in elf-stats-silvered-ornament-756 (npm) MAL-2025-191954 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-silvered-ornament-756 |
Malicious release: Malicious code in elf-stats-snowdusted-sparkler-261 (npm) MAL-2025-191955 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-snowdusted-sparkler-261 |
Malicious release: Malicious code in elf-stats-snowdusted-wishlist-166 (npm) MAL-2025-191956 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-snowdusted-wishlist-166 |
Malicious release: Malicious code in elf-stats-sparkly-hammer-880 (npm) MAL-2025-191957 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sparkly-hammer-880 |