Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in float-beta-deploy-star-meta (npm) MAL-2025-186999 | Malicious | Not scored | 13 Nov, 2025 | npm float-beta-deploy-star-meta |
Malicious release: Malicious code in float-encrypt-awk-dog-export (npm) MAL-2025-187000 | Malicious | Not scored | 13 Nov, 2025 | npm float-encrypt-awk-dog-export |
Malicious release: Malicious code in float-new-route-benchmark-async (npm) MAL-2025-187001 | Malicious | Not scored | 13 Nov, 2025 | npm float-new-route-benchmark-async |
Malicious release: Malicious code in float-rain-finally-yaml-air (npm) MAL-2025-187002 | Malicious | Not scored | 13 Nov, 2025 | npm float-rain-finally-yaml-air |
Malicious release: Malicious code in fomalhaut-dysonswarm-ablation-google (npm) MAL-2025-187003 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-dysonswarm-ablation-google |
Malicious release: Malicious code in fomalhaut-jabbah-telesto-antares (npm) MAL-2025-187004 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-jabbah-telesto-antares |
Malicious release: Malicious code in fomalhaut-nashira-webdriverio-init (npm) MAL-2025-187005 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-nashira-webdriverio-init |
Malicious release: Malicious code in fomalhaut-ora-cybernetics-publish (npm) MAL-2025-187006 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-ora-cybernetics-publish |
Malicious release: Malicious code in fomalhaut-restart-loglevel-forever (npm) MAL-2025-187007 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-restart-loglevel-forever |
Malicious release: Malicious code in fomalhaut-venus-pavo-update (npm) MAL-2025-187008 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-venus-pavo-update |
Malicious release: Malicious code in forever-cygnus-postcss-jwt (npm) MAL-2025-187009 | Malicious | Not scored | 13 Nov, 2025 | npm forever-cygnus-postcss-jwt |
Malicious release: Malicious code in forever-cypress-public-package (npm) MAL-2025-187010 | Malicious | Not scored | 13 Nov, 2025 | npm forever-cypress-public-package |
Malicious release: Malicious code in forever-heka-polaris-elektra (npm) MAL-2025-187011 | Malicious | Not scored | 13 Nov, 2025 | npm forever-heka-polaris-elektra |
Malicious release: Malicious code in forever-iota-callback-vulcan (npm) MAL-2025-187012 | Malicious | Not scored | 13 Nov, 2025 | npm forever-iota-callback-vulcan |
Malicious release: Malicious code in forever-npm-sociobiology-cassini (npm) MAL-2025-187013 | Malicious | Not scored | 13 Nov, 2025 | npm forever-npm-sociobiology-cassini |
Malicious release: Malicious code in forever-regulus-hyperion-commitizen (npm) MAL-2025-187014 | Malicious | Not scored | 13 Nov, 2025 | npm forever-regulus-hyperion-commitizen |
Malicious release: Malicious code in forever-webpack-whitedwarf-nextjs (npm) MAL-2025-187015 | Malicious | Not scored | 13 Nov, 2025 | npm forever-webpack-whitedwarf-nextjs |
Malicious release: Malicious code in forever-zephyr-pavo-slides (npm) MAL-2025-187016 | Malicious | Not scored | 13 Nov, 2025 | npm forever-zephyr-pavo-slides |
Malicious release: Malicious code in fork-crust-filament-kardashevscale (npm) MAL-2025-187017 | Malicious | Not scored | 13 Nov, 2025 | npm fork-crust-filament-kardashevscale |
Malicious release: Malicious code in fork-eslint-slidev-chakra-ui (npm) MAL-2025-187018 | Malicious | Not scored | 13 Nov, 2025 | npm fork-eslint-slidev-chakra-ui |
Malicious release: Malicious code in fork-lightyear-commitlint-unuk (npm) MAL-2025-187019 | Malicious | Not scored | 13 Nov, 2025 | npm fork-lightyear-commitlint-unuk |
Malicious release: Malicious code in fork-object-protected-data-fork (npm) MAL-2025-187020 | Malicious | Not scored | 13 Nov, 2025 | npm fork-object-protected-data-fork |
Malicious release: Malicious code in fork-omicron-socket-easy-array (npm) MAL-2025-187021 | Malicious | Not scored | 13 Nov, 2025 | npm fork-omicron-socket-easy-array |
Malicious release: Malicious code in fork-playwright-joviology-accretion (npm) MAL-2025-187022 | Malicious | Not scored | 13 Nov, 2025 | npm fork-playwright-joviology-accretion |
Malicious release: Malicious code in fork-secure-code-daemon-abstract (npm) MAL-2025-187023 | Malicious | Not scored | 13 Nov, 2025 | npm fork-secure-code-daemon-abstract |
Malicious release: Malicious code in fork-webpack-kastra-chai (npm) MAL-2025-187024 | Malicious | Not scored | 13 Nov, 2025 | npm fork-webpack-kastra-chai |
Malicious release: Malicious code in fork-winston-apollo-yaml (npm) MAL-2025-187025 | Malicious | Not scored | 13 Nov, 2025 | npm fork-winston-apollo-yaml |
Malicious release: Malicious code in fork-wormhole-upgrade-geoarchaeology (npm) MAL-2025-187026 | Malicious | Not scored | 13 Nov, 2025 | npm fork-wormhole-upgrade-geoarchaeology |
Malicious release: Malicious code in fornax-acamar-photon-futurology (npm) MAL-2025-187027 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-acamar-photon-futurology |
Malicious release: Malicious code in fornax-castor-saturnology-soap (npm) MAL-2025-187028 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-castor-saturnology-soap |
Malicious release: Malicious code in fornax-chariklo-sass-loader-parsec (npm) MAL-2025-187029 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-chariklo-sass-loader-parsec |
Malicious release: Malicious code in fornax-janus-fusion-css-minimizer-webpack-plugin (npm) MAL-2025-187030 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-janus-fusion-css-minimizer-webpack-plugin |
Malicious release: Malicious code in fornax-jest-ariel-spica (npm) MAL-2025-187031 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-jest-ariel-spica |
Malicious release: Malicious code in fornax-library-eslint-javascript (npm) MAL-2025-187032 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-library-eslint-javascript |
Malicious release: Malicious code in fornax-local-gemini-zenith (npm) MAL-2025-187033 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-local-gemini-zenith |
Malicious release: Malicious code in fornax-materialize-sails-dactyl (npm) MAL-2025-187034 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-materialize-sails-dactyl |
Malicious release: Malicious code in fornax-phoebe-jabbah-xo (npm) MAL-2025-187035 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-phoebe-jabbah-xo |
Malicious release: Malicious code in fornax-postgres-phoenix-semantic-ui (npm) MAL-2025-187036 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-postgres-phoenix-semantic-ui |
Malicious release: Malicious code in fornax-socketio-ganymede-boson (npm) MAL-2025-187037 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-socketio-ganymede-boson |
Malicious release: Malicious code in fornax-transport-webdriver-manager-carpo (npm) MAL-2025-187038 | Malicious | Not scored | 13 Nov, 2025 | npm fornax-transport-webdriver-manager-carpo |
Malicious release: Malicious code in foundation-await-pavo-chariklo (npm) MAL-2025-187039 | Malicious | Not scored | 13 Nov, 2025 | npm foundation-await-pavo-chariklo |
Malicious release: Malicious code in foundation-node-config-farout-bunyan (npm) MAL-2025-187040 | Malicious | Not scored | 13 Nov, 2025 | npm foundation-node-config-farout-bunyan |
Malicious release: Malicious code in foundation-rigel-pm2-foundation (npm) MAL-2025-187041 | Malicious | Not scored | 13 Nov, 2025 | npm foundation-rigel-pm2-foundation |
Malicious release: Malicious code in foundation-transport-xenobiology-commitlint-config-angular (npm) MAL-2025-187042 | Malicious | Not scored | 13 Nov, 2025 | npm foundation-transport-xenobiology-commitlint-config-angular |
Malicious release: Malicious code in framework-baryon-install-iota (npm) MAL-2025-187043 | Malicious | Not scored | 13 Nov, 2025 | npm framework-baryon-install-iota |
Malicious release: Malicious code in framework-bellatrix-await-unuk (npm) MAL-2025-187044 | Malicious | Not scored | 13 Nov, 2025 | npm framework-bellatrix-await-unuk |
Malicious release: Malicious code in framework-orbit-query-kardashevscale (npm) MAL-2025-187045 | Malicious | Not scored | 13 Nov, 2025 | npm framework-orbit-query-kardashevscale |
Malicious release: Malicious code in framework-release-it-fornax-non-blocking (npm) MAL-2025-187046 | Malicious | Not scored | 13 Nov, 2025 | npm framework-release-it-fornax-non-blocking |
Malicious release: Malicious code in framework-rimraf-buffer-csrf (npm) MAL-2025-187047 | Malicious | Not scored | 13 Nov, 2025 | npm framework-rimraf-buffer-csrf |
Malicious release: Malicious code in framework-triton-string-farout (npm) MAL-2025-187048 | Malicious | Not scored | 13 Nov, 2025 | npm framework-triton-string-farout |