Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hpi-porsche-app (npm) MAL-2025-191510 | Malicious | Not scored | 01 Dec, 2025 | npm hpi-porsche-app |
Malicious release: Malicious code in iife-sample (npm) MAL-2025-191511 | Malicious | Not scored | 01 Dec, 2025 | npm iife-sample |
Malicious release: Malicious code in kubebuilder (npm) MAL-2025-191512 | Malicious | Not scored | 01 Dec, 2025 | npm kubebuilder |
Malicious release: Malicious code in kubernetes-controller-tools (npm) MAL-2025-191513 | Malicious | Not scored | 01 Dec, 2025 | npm kubernetes-controller-tools |
Malicious release: Malicious code in kubernetes-helm (npm) MAL-2025-191514 | Malicious | Not scored | 01 Dec, 2025 | npm kubernetes-helm |
Malicious release: Malicious code in leafygreen-docs (npm) MAL-2025-191515 | Malicious | Not scored | 01 Dec, 2025 | npm leafygreen-docs |
Malicious release: Malicious code in markdownlint-cli2-action (npm) MAL-2025-191516 | Malicious | Not scored | 01 Dec, 2025 | npm markdownlint-cli2-action |
Malicious release: Malicious code in mongodb-atlas-cli-toc-generator (npm) MAL-2025-191517 | Malicious | Not scored | 01 Dec, 2025 | npm mongodb-atlas-cli-toc-generator |
Malicious release: Malicious code in mongodb-compass (npm) MAL-2025-191518 | Malicious | Not scored | 01 Dec, 2025 | npm mongodb-compass |
Malicious release: Malicious code in mongodb-stitch-server-testutils (npm) MAL-2025-191519 | Malicious | Not scored | 01 Dec, 2025 | npm mongodb-stitch-server-testutils |
Malicious release: Malicious code in nnc-web (npm) MAL-2025-191520 | Malicious | Not scored | 01 Dec, 2025 | npm nnc-web |
Malicious release: Malicious code in nova-angular-project (npm) MAL-2025-191521 | Malicious | Not scored | 01 Dec, 2025 | npm nova-angular-project |
Malicious release: Malicious code in privy-farcaster-demo (npm) MAL-2025-191522 | Malicious | Not scored | 01 Dec, 2025 | npm privy-farcaster-demo |
Malicious release: Malicious code in privy-frames-v2-demo (npm) MAL-2025-191523 | Malicious | Not scored | 01 Dec, 2025 | npm privy-frames-v2-demo |
Malicious release: Malicious code in render-stage (npm) MAL-2025-191524 | Malicious | Not scored | 01 Dec, 2025 | npm render-stage |
Malicious release: Malicious code in ripiocoin (npm) MAL-2025-191525 | Malicious | Not scored | 01 Dec, 2025 | npm ripiocoin |
Malicious release: Malicious code in silentcipherui (npm) MAL-2025-191526 | Malicious | Not scored | 01 Dec, 2025 | npm silentcipherui |
Malicious release: Malicious code in solana-dev-mcp (npm) MAL-2025-191527 | Malicious | Not scored | 01 Dec, 2025 | npm solana-dev-mcp |
Malicious release: Malicious code in telesis (npm) MAL-2025-191528 | Malicious | Not scored | 01 Dec, 2025 | npm telesis |
Malicious release: Malicious code in terrain-sample (npm) MAL-2025-191529 | Malicious | Not scored | 01 Dec, 2025 | npm terrain-sample |
Malicious release: Malicious code in tilt-ui (npm) MAL-2025-191530 | Malicious | Not scored | 01 Dec, 2025 | npm tilt-ui |
Malicious release: Malicious code in usb_dev (npm) MAL-2025-191531 | Malicious | Not scored | 01 Dec, 2025 | npm usb_dev |
Malicious release: Malicious code in yq-go (npm) MAL-2025-191532 | Malicious | Not scored | 01 Dec, 2025 | npm yq-go |
Malicious release: Malicious code in libdebugrouter.so (npm) GHSA-23g4-qxh9-7jj2, MAL-2025-191499 | Malicious | Not scored | 01 Dec, 2025 | npm libdebugrouter.so |
Malicious release: Malicious code in m365-action-sdk (npm) GHSA-6xfg-v6q5-f283, MAL-2025-191500 | Malicious | Not scored | 01 Dec, 2025 | npm m365-action-sdk |
Malicious release: Malicious code in pluxee-design-system (npm) GHSA-h25r-4pmf-r6mf, MAL-2025-191502 | Malicious | Not scored | 01 Dec, 2025 | npm pluxee-design-system |
Malicious release: Malicious code in old-hd-keyring (npm) GHSA-m869-8jgq-53w4, MAL-2025-191501 | Malicious | Not scored | 01 Dec, 2025 | npm old-hd-keyring |
Malicious release: Malicious code in @bingads-webui-clientcenter/instrumentation (npm) MAL-2025-191495 | Malicious | Not scored | 01 Dec, 2025 | npm @bingads-webui-clientcenter/instrumentation |
Malicious release: Malicious code in @hand-talk/yotta-core (npm) MAL-2025-191496 | Malicious | Not scored | 01 Dec, 2025 | npm @hand-talk/yotta-core |
Malicious release: Malicious code in handtalk-test-app (npm) MAL-2025-191497 | Malicious | Not scored | 01 Dec, 2025 | npm handtalk-test-app |
Malicious release: Malicious code in kmf-cookieservice (npm) MAL-2025-191498 | Malicious | Not scored | 01 Dec, 2025 | npm kmf-cookieservice |
Malicious release: Malicious code in start-internal (npm) MAL-2025-191503 | Malicious | Not scored | 01 Dec, 2025 | npm start-internal |
Malicious release: Malicious code in testhaus (npm) MAL-2025-191504 | Malicious | Not scored | 01 Dec, 2025 | npm testhaus |
Malicious release: Malicious code in hl-naduccio (npm) GHSA-2rqw-9jfq-33mm, MAL-2025-191538 | Malicious | Not scored | 01 Dec, 2025 | npm hl-naduccio |
Malicious release: Malicious code in xmenddddl (npm) MAL-2025-191603 | Malicious | Not scored | 01 Dec, 2025 | npm xmenddddl |
Malicious release: Malicious code in web-uj65mn (npm) MAL-2025-191602 | Malicious | Not scored | 01 Dec, 2025 | npm web-uj65mn |
Malicious release: Malicious code in web-nbq6lx (npm) MAL-2025-191601 | Malicious | Not scored | 01 Dec, 2025 | npm web-nbq6lx |
Malicious release: Malicious code in vite-dynamic-chunks (npm) MAL-2025-191600, SNYK-JS-VITEDYNAMICCHUNKS-14152344 | Malicious | Not scored | 01 Dec, 2025 | npm vite-dynamic-chunks |
Malicious release: Malicious code in vbails (npm) MAL-2025-191599 | Malicious | Not scored | 01 Dec, 2025 | npm vbails |
Malicious release: Malicious code in test-dependency-confusion-g3ksec (npm) MAL-2025-191598 | Malicious | Not scored | 01 Dec, 2025 | npm test-dependency-confusion-g3ksec |
Malicious release: Malicious code in tensor-fi-crypto-utils (npm) MAL-2025-191597 | Malicious | Not scored | 01 Dec, 2025 | npm tensor-fi-crypto-utils |
Malicious release: Malicious code in telegram-api-test (npm) MAL-2025-191596 | Malicious | Not scored | 01 Dec, 2025 | npm telegram-api-test |
Malicious release: Malicious code in tailwindcss-forms (npm) MAL-2025-191595, SNYK-JS-TAILWINDCSSFORMS-14152334 | Malicious | Not scored | 01 Dec, 2025 | npm tailwindcss-forms |
Malicious release: Malicious code in tailwind-style-override (npm) MAL-2025-191594, SNYK-JS-TAILWINDSTYLEOVERRIDE-14152321 | Malicious | Not scored | 01 Dec, 2025 | npm tailwind-style-override |
Malicious release: Malicious code in tailwind-state (npm) MAL-2025-191593, SNYK-JS-TAILWINDSTATE-14152320 | Malicious | Not scored | 01 Dec, 2025 | npm tailwind-state |
Malicious release: Malicious code in szsec-infoss-report (npm) MAL-2025-191592 | Malicious | Not scored | 01 Dec, 2025 | npm szsec-infoss-report |
Malicious release: Malicious code in szsec-infos-report-wh2sper (npm) MAL-2025-191591 | Malicious | Not scored | 01 Dec, 2025 | npm szsec-infos-report-wh2sper |
Malicious release: Malicious code in szsec-infos-report-wh1sper (npm) MAL-2025-191590 | Malicious | Not scored | 01 Dec, 2025 | npm szsec-infos-report-wh1sper |
Malicious release: Malicious code in szsec-info-report (npm) MAL-2025-191589 | Malicious | Not scored | 01 Dec, 2025 | npm szsec-info-report |
Malicious release: Malicious code in stringify-coder (npm) MAL-2025-191588, SNYK-JS-STRINGIFYCODER-14152307 | Malicious | Not scored | 01 Dec, 2025 | npm stringify-coder |