Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in duplex-request-astrometry-titan (npm) MAL-2025-186649 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-request-astrometry-titan |
Malicious release: Malicious code in duplex-tailwindcss-nestjs-polaris (npm) MAL-2025-186650 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-tailwindcss-nestjs-polaris |
Malicious release: Malicious code in duplex-version-polaris-cosmos (npm) MAL-2025-186651 | Malicious | Not scored | 13 Nov, 2025 | npm duplex-version-polaris-cosmos |
Malicious release: Malicious code in dynamo-ganymede-init-sequelize (npm) MAL-2025-186652 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-ganymede-init-sequelize |
Malicious release: Malicious code in dynamo-leda-registry-unuk (npm) MAL-2025-186653 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-leda-registry-unuk |
Malicious release: Malicious code in dynamo-mini-css-extract-plugin-cosmicsilence-frontend (npm) MAL-2025-186654 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-mini-css-extract-plugin-cosmicsilence-frontend |
Malicious release: Malicious code in dynamo-run-script-jasmine-kuiperbelt (npm) MAL-2025-186655 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-run-script-jasmine-kuiperbelt |
Malicious release: Malicious code in dynamo-schema-higgs-geoarchaeology (npm) MAL-2025-186656 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-schema-higgs-geoarchaeology |
Malicious release: Malicious code in dynamo-sirius-changelog-string (npm) MAL-2025-186657 | Malicious | Not scored | 13 Nov, 2025 | npm dynamo-sirius-changelog-string |
Malicious release: Malicious code in dysonswarm-apex-graphql-module (npm) MAL-2025-186658 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-apex-graphql-module |
Malicious release: Malicious code in dysonswarm-gulp-dendrochronology-iota (npm) MAL-2025-186659 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-gulp-dendrochronology-iota |
Malicious release: Malicious code in dysonswarm-joviology-node-sass-troposphere (npm) MAL-2025-186660 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-joviology-node-sass-troposphere |
Malicious release: Malicious code in dysonswarm-lacerta-unuk-dynamo (npm) MAL-2025-186661 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-lacerta-unuk-dynamo |
Malicious release: Malicious code in dysonswarm-loop-command-uranology (npm) MAL-2025-186662 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-loop-command-uranology |
Malicious release: Malicious code in dysonswarm-public-mutation-sagitta (npm) MAL-2025-186663 | Malicious | Not scored | 13 Nov, 2025 | npm dysonswarm-public-mutation-sagitta |
Malicious release: Malicious code in earth-omega-epsilon-error-compress (npm) MAL-2025-186664 | Malicious | Not scored | 13 Nov, 2025 | npm earth-omega-epsilon-error-compress |
Malicious release: Malicious code in earth-protected-gamma-test-star (npm) MAL-2025-186665 | Malicious | Not scored | 13 Nov, 2025 | npm earth-protected-gamma-test-star |
Malicious release: Malicious code in earth-small-scale-simulate-static (npm) MAL-2025-186666 | Malicious | Not scored | 13 Nov, 2025 | npm earth-small-scale-simulate-static |
Malicious release: Malicious code in earth-visualize-abstract-beta-pipe (npm) MAL-2025-186667 | Malicious | Not scored | 13 Nov, 2025 | npm earth-visualize-abstract-beta-pipe |
Malicious release: Malicious code in easy-cron-secure-thread-sanitize (npm) MAL-2025-186668 | Malicious | Not scored | 13 Nov, 2025 | npm easy-cron-secure-thread-sanitize |
Malicious release: Malicious code in easy-emulate-try-psi-balance (npm) MAL-2025-186669 | Malicious | Not scored | 13 Nov, 2025 | npm easy-emulate-try-psi-balance |
Malicious release: Malicious code in easy-interpret-big-proxy-scale (npm) MAL-2025-186670 | Malicious | Not scored | 13 Nov, 2025 | npm easy-interpret-big-proxy-scale |
Malicious release: Malicious code in easy-kernel-deserialize-public-await (npm) MAL-2025-186671 | Malicious | Not scored | 13 Nov, 2025 | npm easy-kernel-deserialize-public-await |
Malicious release: Malicious code in easy-link-authorize-simple-view (npm) MAL-2025-186672 | Malicious | Not scored | 13 Nov, 2025 | npm easy-link-authorize-simple-view |
Malicious release: Malicious code in easy-parse-async-xi-analyze (npm) MAL-2025-186673 | Malicious | Not scored | 13 Nov, 2025 | npm easy-parse-async-xi-analyze |
Malicious release: Malicious code in easy-pipe-signal-proxy-uglify (npm) MAL-2025-186674 | Malicious | Not scored | 13 Nov, 2025 | npm easy-pipe-signal-proxy-uglify |
Malicious release: Malicious code in easy-serialize-omicron-mu-assert (npm) MAL-2025-186675 | Malicious | Not scored | 13 Nov, 2025 | npm easy-serialize-omicron-mu-assert |
Malicious release: Malicious code in easy-throw-cron-rho-sanitize (npm) MAL-2025-186676 | Malicious | Not scored | 13 Nov, 2025 | npm easy-throw-cron-rho-sanitize |
Malicious release: Malicious code in eclipse-eridanus-upgrade-registry (npm) MAL-2025-186677 | Malicious | Not scored | 13 Nov, 2025 | npm eclipse-eridanus-upgrade-registry |
Malicious release: Malicious code in eclipse-hercules-europa-prettier-plugin-markdown (npm) MAL-2025-186678 | Malicious | Not scored | 13 Nov, 2025 | npm eclipse-hercules-europa-prettier-plugin-markdown |
Malicious release: Malicious code in eclipse-levels-lynx-nanotechnology (npm) MAL-2025-186679 | Malicious | Not scored | 13 Nov, 2025 | npm eclipse-levels-lynx-nanotechnology |
Malicious release: Malicious code in eclipse-parsec-native-commitlint-config-angular (npm) MAL-2025-186680 | Malicious | Not scored | 13 Nov, 2025 | npm eclipse-parsec-native-commitlint-config-angular |
Malicious release: Malicious code in eclipse-triton-avior-yonder (npm) MAL-2025-186681 | Malicious | Not scored | 13 Nov, 2025 | npm eclipse-triton-avior-yonder |
Malicious release: Malicious code in eclipse-ursa-element-ui-middleware (npm) MAL-2025-186682 | Malicious | Not scored | 13 Nov, 2025 | npm eclipse-ursa-element-ui-middleware |
Malicious release: Malicious code in eigenstate-areology-deneb-parallax (npm) MAL-2025-186683 | Malicious | Not scored | 13 Nov, 2025 | npm eigenstate-areology-deneb-parallax |
Malicious release: Malicious code in eigenstate-auriga-module-chromedriver (npm) MAL-2025-186684 | Malicious | Not scored | 13 Nov, 2025 | npm eigenstate-auriga-module-chromedriver |
Malicious release: Malicious code in eigenstate-electron-builder-despina-bionics (npm) MAL-2025-186685 | Malicious | Not scored | 13 Nov, 2025 | npm eigenstate-electron-builder-despina-bionics |
Malicious release: Malicious code in eigenstate-electron-lithosphere-dagda (npm) MAL-2025-186686 | Malicious | Not scored | 13 Nov, 2025 | npm eigenstate-electron-lithosphere-dagda |
Malicious release: Malicious code in eigenstate-gravitationalwave-config-ora (npm) MAL-2025-186687 | Malicious | Not scored | 13 Nov, 2025 | npm eigenstate-gravitationalwave-config-ora |
Malicious release: Malicious code in eigenstate-ophiuchus-sociobiology-koa (npm) MAL-2025-186688 | Malicious | Not scored | 13 Nov, 2025 | npm eigenstate-ophiuchus-sociobiology-koa |
Malicious release: Malicious code in eigenstate-outercore-procyon-colors (npm) MAL-2025-186689 | Malicious | Not scored | 13 Nov, 2025 | npm eigenstate-outercore-procyon-colors |
Malicious release: Malicious code in eigenstate-spectron-loopback-wormhole (npm) MAL-2025-186690 | Malicious | Not scored | 13 Nov, 2025 | npm eigenstate-spectron-loopback-wormhole |
Malicious release: Malicious code in elara-auth-enif-prettier (npm) MAL-2025-186691 | Malicious | Not scored | 13 Nov, 2025 | npm elara-auth-enif-prettier |
Malicious release: Malicious code in elara-dysonswarm-sirius-pyxis (npm) MAL-2025-186692 | Malicious | Not scored | 13 Nov, 2025 | npm elara-dysonswarm-sirius-pyxis |
Malicious release: Malicious code in elara-express-babel-meteor (npm) MAL-2025-186693 | Malicious | Not scored | 13 Nov, 2025 | npm elara-express-babel-meteor |
Malicious release: Malicious code in elara-hexo-postgres-astrochemistry (npm) MAL-2025-186694 | Malicious | Not scored | 13 Nov, 2025 | npm elara-hexo-postgres-astrochemistry |
Malicious release: Malicious code in elara-jovian-dorado-biogeochemistry (npm) MAL-2025-186695 | Malicious | Not scored | 13 Nov, 2025 | npm elara-jovian-dorado-biogeochemistry |
Malicious release: Malicious code in elara-magnetar-asteroid-cosmicray (npm) MAL-2025-186696 | Malicious | Not scored | 13 Nov, 2025 | npm elara-magnetar-asteroid-cosmicray |
Malicious release: Malicious code in elara-triton-quasar-async (npm) MAL-2025-186697 | Malicious | Not scored | 13 Nov, 2025 | npm elara-triton-quasar-async |
Malicious release: Malicious code in electron-builder-csv-npm-asteroid (npm) MAL-2025-186698 | Malicious | Not scored | 13 Nov, 2025 | npm electron-builder-csv-npm-asteroid |