Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hawkingradiation-xenobiology-prettier-stylelint-buffer (npm) MAL-2025-187299 | Malicious | Not scored | 13 Nov, 2025 | npm hawkingradiation-xenobiology-prettier-stylelint-buffer |
Malicious release: Malicious code in heka-antares-vulcan-commitizen (npm) MAL-2025-187300 | Malicious | Not scored | 13 Nov, 2025 | npm heka-antares-vulcan-commitizen |
Malicious release: Malicious code in heka-bootstrap-javascript-loopback (npm) MAL-2025-187301 | Malicious | Not scored | 13 Nov, 2025 | npm heka-bootstrap-javascript-loopback |
Malicious release: Malicious code in heka-buffer-holography-subduction (npm) MAL-2025-187302 | Malicious | Not scored | 13 Nov, 2025 | npm heka-buffer-holography-subduction |
Malicious release: Malicious code in heka-buffer-install-transform (npm) MAL-2025-187303 | Malicious | Not scored | 13 Nov, 2025 | npm heka-buffer-install-transform |
Malicious release: Malicious code in heka-centaurus-nodemon-hydrogeology (npm) MAL-2025-187304 | Malicious | Not scored | 13 Nov, 2025 | npm heka-centaurus-nodemon-hydrogeology |
Malicious release: Malicious code in heka-markdownlint-rollup-node-config (npm) MAL-2025-187305 | Malicious | Not scored | 13 Nov, 2025 | npm heka-markdownlint-rollup-node-config |
Malicious release: Malicious code in heka-mdx-kaus-indus (npm) MAL-2025-187306 | Malicious | Not scored | 13 Nov, 2025 | npm heka-mdx-kaus-indus |
Malicious release: Malicious code in heka-neptune-nightwatch-andromeda (npm) MAL-2025-187307 | Malicious | Not scored | 13 Nov, 2025 | npm heka-neptune-nightwatch-andromeda |
Malicious release: Malicious code in heka-puppeteer-phoebe-meteor (npm) MAL-2025-187308 | Malicious | Not scored | 13 Nov, 2025 | npm heka-puppeteer-phoebe-meteor |
Malicious release: Malicious code in heka-relay-grunt-gammarayburst (npm) MAL-2025-187309 | Malicious | Not scored | 13 Nov, 2025 | npm heka-relay-grunt-gammarayburst |
Malicious release: Malicious code in heka-zenobia-pyxis-mui (npm) MAL-2025-187310 | Malicious | Not scored | 13 Nov, 2025 | npm heka-zenobia-pyxis-mui |
Malicious release: Malicious code in heliophysics-aurora-lint-staged-global (npm) MAL-2025-187311 | Malicious | Not scored | 13 Nov, 2025 | npm heliophysics-aurora-lint-staged-global |
Malicious release: Malicious code in heliophysics-blackhole-ganymede-cluster (npm) MAL-2025-187312 | Malicious | Not scored | 13 Nov, 2025 | npm heliophysics-blackhole-ganymede-cluster |
Malicious release: Malicious code in heliophysics-pino-umbriel-request (npm) MAL-2025-187313 | Malicious | Not scored | 13 Nov, 2025 | npm heliophysics-pino-umbriel-request |
Malicious release: Malicious code in helios-centaurus-juno-lint-staged (npm) MAL-2025-187314 | Malicious | Not scored | 13 Nov, 2025 | npm helios-centaurus-juno-lint-staged |
Malicious release: Malicious code in helios-cressida-biogeochemistry-halley (npm) MAL-2025-187315 | Malicious | Not scored | 13 Nov, 2025 | npm helios-cressida-biogeochemistry-halley |
Malicious release: Malicious code in helios-epigenetics-asteroid-eclipse (npm) MAL-2025-187316 | Malicious | Not scored | 13 Nov, 2025 | npm helios-epigenetics-asteroid-eclipse |
Malicious release: Malicious code in helios-fusion-rollup-command (npm) MAL-2025-187317 | Malicious | Not scored | 13 Nov, 2025 | npm helios-fusion-rollup-command |
Malicious release: Malicious code in helios-jekyll-polaris-soap (npm) MAL-2025-187318 | Malicious | Not scored | 13 Nov, 2025 | npm helios-jekyll-polaris-soap |
Malicious release: Malicious code in helios-nightwatch-tethys-eridanus (npm) MAL-2025-187319 | Malicious | Not scored | 13 Nov, 2025 | npm helios-nightwatch-tethys-eridanus |
Malicious release: Malicious code in helios-webdriver-mocha-superposition-phylogenetics (npm) MAL-2025-187320 | Malicious | Not scored | 13 Nov, 2025 | npm helios-webdriver-mocha-superposition-phylogenetics |
Malicious release: Malicious code in helios-zenobia-geckodriver-rigel (npm) MAL-2025-187321 | Malicious | Not scored | 13 Nov, 2025 | npm helios-zenobia-geckodriver-rigel |
Malicious release: Malicious code in helmet-blitz-izar-update (npm) MAL-2025-187322 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-blitz-izar-update |
Malicious release: Malicious code in helmet-geochronology-rigel-sails (npm) MAL-2025-187323 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-geochronology-rigel-sails |
Malicious release: Malicious code in helmet-neutronstar-xo-xerxes (npm) MAL-2025-187324 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-neutronstar-xo-xerxes |
Malicious release: Malicious code in helmet-pegasus-non-blocking-phoebe (npm) MAL-2025-187325 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-pegasus-non-blocking-phoebe |
Malicious release: Malicious code in helmet-radiant-babel-dorado (npm) MAL-2025-187326 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-radiant-babel-dorado |
Malicious release: Malicious code in helmet-release-it-enceladus-figures (npm) MAL-2025-187327 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-release-it-enceladus-figures |
Malicious release: Malicious code in helmet-sagitta-saturnology-element-ui (npm) MAL-2025-187328 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-sagitta-saturnology-element-ui |
Malicious release: Malicious code in helmet-sirius-ini-mocha (npm) MAL-2025-187329 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-sirius-ini-mocha |
Malicious release: Malicious code in helmet-supercluster-release-it-technosignature (npm) MAL-2025-187330 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-supercluster-release-it-technosignature |
Malicious release: Malicious code in helmet-terser-isostasy-nova (npm) MAL-2025-187331 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-terser-isostasy-nova |
Malicious release: Malicious code in hercules-config-juno-void (npm) MAL-2025-187332 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-config-juno-void |
Malicious release: Malicious code in hercules-css-loader-restart-eslint-plugin (npm) MAL-2025-187333 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-css-loader-restart-eslint-plugin |
Malicious release: Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm) MAL-2025-187334 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado |
Malicious release: Malicious code in hercules-deimos-superagent-webdriverio (npm) MAL-2025-187335 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-deimos-superagent-webdriverio |
Malicious release: Malicious code in hercules-fermion-hyperion-version (npm) MAL-2025-187336 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-fermion-hyperion-version |
Malicious release: Malicious code in hercules-local-ceres-backend (npm) MAL-2025-187337 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-local-ceres-backend |
Malicious release: Malicious code in hercules-pyxis-rehype-hermes (npm) MAL-2025-187338 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-pyxis-rehype-hermes |
Malicious release: Malicious code in hercules-radiant-jekyll-delphinus (npm) MAL-2025-187339 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-radiant-jekyll-delphinus |
Malicious release: Malicious code in hercules-winston-janus-miranda (npm) MAL-2025-187340 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-winston-janus-miranda |
Malicious release: Malicious code in hermes-browserify-alphard-greatfilter (npm) MAL-2025-187341 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-browserify-alphard-greatfilter |
Malicious release: Malicious code in hermes-child-process-apex-centauri (npm) MAL-2025-187342 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-child-process-apex-centauri |
Malicious release: Malicious code in hermes-config-unuk-aurora (npm) MAL-2025-187343 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-config-unuk-aurora |
Malicious release: Malicious code in hermes-dactyl-canopus-flare (npm) MAL-2025-187344 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-dactyl-canopus-flare |
Malicious release: Malicious code in hermes-jekyll-io-nightwatch (npm) MAL-2025-187345 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-jekyll-io-nightwatch |
Malicious release: Malicious code in hermes-polaris-regulus-apollo (npm) MAL-2025-187346 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-polaris-regulus-apollo |
Malicious release: Malicious code in hermes-venus-cosmos-rest (npm) MAL-2025-187347 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-venus-cosmos-rest |
Malicious release: Malicious code in hermes-version-mdx-yaml (npm) MAL-2025-187348 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-version-mdx-yaml |