Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in fermion-geochronology-quito-janus (npm) MAL-2025-186949 | Malicious | Not scored | 13 Nov, 2025 | npm fermion-geochronology-quito-janus |
Malicious release: Malicious code in fermion-graphql-dorado-lynx (npm) MAL-2025-186950 | Malicious | Not scored | 13 Nov, 2025 | npm fermion-graphql-dorado-lynx |
Malicious release: Malicious code in fermion-solis-wezen-browserify (npm) MAL-2025-186951 | Malicious | Not scored | 13 Nov, 2025 | npm fermion-solis-wezen-browserify |
Malicious release: Malicious code in fermion-thermosphere-hawkingradiation-astrophysics (npm) MAL-2025-186952 | Malicious | Not scored | 13 Nov, 2025 | npm fermion-thermosphere-hawkingradiation-astrophysics |
Malicious release: Malicious code in fermiparadox-graviton-brane-membrane (npm) MAL-2025-186953 | Malicious | Not scored | 13 Nov, 2025 | npm fermiparadox-graviton-brane-membrane |
Malicious release: Malicious code in fermiparadox-helios-pyxis-astrometry (npm) MAL-2025-186954 | Malicious | Not scored | 13 Nov, 2025 | npm fermiparadox-helios-pyxis-astrometry |
Malicious release: Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb (npm) MAL-2025-186955 | Malicious | Not scored | 13 Nov, 2025 | npm fermiparadox-mini-css-extract-plugin-andromeda-mongodb |
Malicious release: Malicious code in fermiparadox-redshift-rollup-plugin-phoebe (npm) MAL-2025-186956 | Malicious | Not scored | 13 Nov, 2025 | npm fermiparadox-redshift-rollup-plugin-phoebe |
Malicious release: Malicious code in fetch-blackhole-framework-apollo (npm) MAL-2025-186957 | Malicious | Not scored | 13 Nov, 2025 | npm fetch-blackhole-framework-apollo |
Malicious release: Malicious code in fetch-charon-callisto-meissa (npm) MAL-2025-186958 | Malicious | Not scored | 13 Nov, 2025 | npm fetch-charon-callisto-meissa |
Malicious release: Malicious code in fetch-readable-spectron-convict (npm) MAL-2025-186959 | Malicious | Not scored | 13 Nov, 2025 | npm fetch-readable-spectron-convict |
Malicious release: Malicious code in fetch-ursa-vega-grus (npm) MAL-2025-186960 | Malicious | Not scored | 13 Nov, 2025 | npm fetch-ursa-vega-grus |
Malicious release: Malicious code in figures-archaeoastronomy-hadron-enif (npm) MAL-2025-186961 | Malicious | Not scored | 13 Nov, 2025 | npm figures-archaeoastronomy-hadron-enif |
Malicious release: Malicious code in figures-betelgeuse-ethology-magellan (npm) MAL-2025-186962 | Malicious | Not scored | 13 Nov, 2025 | npm figures-betelgeuse-ethology-magellan |
Malicious release: Malicious code in figures-duplex-halley-vuetify (npm) MAL-2025-186963 | Malicious | Not scored | 13 Nov, 2025 | npm figures-duplex-halley-vuetify |
Malicious release: Malicious code in figures-duplex-magnetar-await (npm) MAL-2025-186964 | Malicious | Not scored | 13 Nov, 2025 | npm figures-duplex-magnetar-await |
Malicious release: Malicious code in figures-elara-lithosphere-cosmicsilence (npm) MAL-2025-186965 | Malicious | Not scored | 13 Nov, 2025 | npm figures-elara-lithosphere-cosmicsilence |
Malicious release: Malicious code in figures-mantle-docusaurus-promise (npm) MAL-2025-186966 | Malicious | Not scored | 13 Nov, 2025 | npm figures-mantle-docusaurus-promise |
Malicious release: Malicious code in figures-materialize-markdown-pdf-miranda (npm) MAL-2025-186967 | Malicious | Not scored | 13 Nov, 2025 | npm figures-materialize-markdown-pdf-miranda |
Malicious release: Malicious code in figures-middleware-proxima-jabbah (npm) MAL-2025-186968 | Malicious | Not scored | 13 Nov, 2025 | npm figures-middleware-proxima-jabbah |
Malicious release: Malicious code in figures-miranda-helmet-exec (npm) MAL-2025-186969 | Malicious | Not scored | 13 Nov, 2025 | npm figures-miranda-helmet-exec |
Malicious release: Malicious code in figures-proxima-sedna-envconfig (npm) MAL-2025-186970 | Malicious | Not scored | 13 Nov, 2025 | npm figures-proxima-sedna-envconfig |
Malicious release: Malicious code in filament-axios-node-config-jasmine (npm) MAL-2025-186971 | Malicious | Not scored | 13 Nov, 2025 | npm filament-axios-node-config-jasmine |
Malicious release: Malicious code in filament-tethys-brane-upgrade (npm) MAL-2025-186972 | Malicious | Not scored | 13 Nov, 2025 | npm filament-tethys-brane-upgrade |
Malicious release: Malicious code in filament-thuban-global-volcanology (npm) MAL-2025-186973 | Malicious | Not scored | 13 Nov, 2025 | npm filament-thuban-global-volcanology |
Malicious release: Malicious code in filament-xanthus-bellatrix-phoenix (npm) MAL-2025-186974 | Malicious | Not scored | 13 Nov, 2025 | npm filament-xanthus-bellatrix-phoenix |
Malicious release: Malicious code in file-decompress-gamma-wind-object (npm) MAL-2025-186975 | Malicious | Not scored | 13 Nov, 2025 | npm file-decompress-gamma-wind-object |
Malicious release: Malicious code in file-sed-hash-xi-sed (npm) MAL-2025-186976 | Malicious | Not scored | 13 Nov, 2025 | npm file-sed-hash-xi-sed |
Malicious release: Malicious code in final-bundle-zero-string-deserialize (npm) MAL-2025-186977 | Malicious | Not scored | 13 Nov, 2025 | npm final-bundle-zero-string-deserialize |
Malicious release: Malicious code in final-daemon-route-boolean-permission (npm) MAL-2025-186978 | Malicious | Not scored | 13 Nov, 2025 | npm final-daemon-route-boolean-permission |
Malicious release: Malicious code in final-dog-throw-resolve-short (npm) MAL-2025-186979 | Malicious | Not scored | 13 Nov, 2025 | npm final-dog-throw-resolve-short |
Malicious release: Malicious code in final-scale-static-yaml-debug (npm) MAL-2025-186980 | Malicious | Not scored | 13 Nov, 2025 | npm final-scale-static-yaml-debug |
Malicious release: Malicious code in final-secure-epsilon-catch-book (npm) MAL-2025-186981 | Malicious | Not scored | 13 Nov, 2025 | npm final-secure-epsilon-catch-book |
Malicious release: Malicious code in final-uglify-decrypt-enum-data (npm) MAL-2025-186982 | Malicious | Not scored | 13 Nov, 2025 | npm final-uglify-decrypt-enum-data |
Malicious release: Malicious code in finally-function-boolean-refactor-runtime (npm) MAL-2025-186983 | Malicious | Not scored | 13 Nov, 2025 | npm finally-function-boolean-refactor-runtime |
Malicious release: Malicious code in finally-notify-table-orchestrate-sigma (npm) MAL-2025-186984 | Malicious | Not scored | 13 Nov, 2025 | npm finally-notify-table-orchestrate-sigma |
Malicious release: Malicious code in finally-stack-error-cold-assert (npm) MAL-2025-186985 | Malicious | Not scored | 13 Nov, 2025 | npm finally-stack-error-cold-assert |
Malicious release: Malicious code in finally-validate-spy-transpile-scale (npm) MAL-2025-186986 | Malicious | Not scored | 13 Nov, 2025 | npm finally-validate-spy-transpile-scale |
Malicious release: Malicious code in firebase-antd-lyra-version (npm) MAL-2025-186987 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-antd-lyra-version |
Malicious release: Malicious code in firebase-command-ursa-websockets (npm) MAL-2025-186988 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-command-ursa-websockets |
Malicious release: Malicious code in firebase-ganymede-registry-async (npm) MAL-2025-186989 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-ganymede-registry-async |
Malicious release: Malicious code in firebase-helios-bionics-virtualreality (npm) MAL-2025-186990 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-helios-bionics-virtualreality |
Malicious release: Malicious code in firebase-indus-biogeochemistry-superagent (npm) MAL-2025-186991 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-indus-biogeochemistry-superagent |
Malicious release: Malicious code in firebase-postgres-gammarayburst-mutation (npm) MAL-2025-186992 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-postgres-gammarayburst-mutation |
Malicious release: Malicious code in firebase-selenology-blitz-eleventy (npm) MAL-2025-186993 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-selenology-blitz-eleventy |
Malicious release: Malicious code in flare-backend-jsonp-orogeny (npm) MAL-2025-186994 | Malicious | Not scored | 13 Nov, 2025 | npm flare-backend-jsonp-orogeny |
Malicious release: Malicious code in flare-commitlint-hydra-astro (npm) MAL-2025-186995 | Malicious | Not scored | 13 Nov, 2025 | npm flare-commitlint-hydra-astro |
Malicious release: Malicious code in flare-ignite-graphql-eridanus (npm) MAL-2025-186996 | Malicious | Not scored | 13 Nov, 2025 | npm flare-ignite-graphql-eridanus |
Malicious release: Malicious code in flare-polaris-sadr-alphard (npm) MAL-2025-186997 | Malicious | Not scored | 13 Nov, 2025 | npm flare-polaris-sadr-alphard |
Malicious release: Malicious code in flare-sirius-parallax-cross-env (npm) MAL-2025-186998 | Malicious | Not scored | 13 Nov, 2025 | npm flare-sirius-parallax-cross-env |