Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hermes-websockets-arcturus-meteor (npm) MAL-2025-187349 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-websockets-arcturus-meteor |
Malicious release: Malicious code in hexo-boson-charon-framework (npm) MAL-2025-187350 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-boson-charon-framework |
Malicious release: Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune (npm) MAL-2025-187351 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-commitlint-config-angular-nuxtjs-neptune |
Malicious release: Malicious code in hexo-duplex-xenos-bootstrap (npm) MAL-2025-187352 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-duplex-xenos-bootstrap |
Malicious release: Malicious code in hexo-interstellarmedium-spinner-less (npm) MAL-2025-187353 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-interstellarmedium-spinner-less |
Malicious release: Malicious code in hexo-phenomic-odin-element-ui (npm) MAL-2025-187354 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-phenomic-odin-element-ui |
Malicious release: Malicious code in hexo-publish-hexo-xo (npm) MAL-2025-187355 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-publish-hexo-xo |
Malicious release: Malicious code in hexo-restart-farout-sync (npm) MAL-2025-187356 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-restart-farout-sync |
Malicious release: Malicious code in hexo-steganography-cli-standard (npm) MAL-2025-187357 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-steganography-cli-standard |
Malicious release: Malicious code in higgs-biosignature-inflation-upgrade (npm) MAL-2025-187358 | Malicious | Not scored | 13 Nov, 2025 | npm higgs-biosignature-inflation-upgrade |
Malicious release: Malicious code in higgs-commitizen-aether-archaeogenetics (npm) MAL-2025-187359 | Malicious | Not scored | 13 Nov, 2025 | npm higgs-commitizen-aether-archaeogenetics |
Malicious release: Malicious code in higgs-ichnology-paleoceanography-pm2 (npm) MAL-2025-187360 | Malicious | Not scored | 13 Nov, 2025 | npm higgs-ichnology-paleoceanography-pm2 |
Malicious release: Malicious code in higgs-markdown-pdf-kaus-helmet (npm) MAL-2025-187361 | Malicious | Not scored | 13 Nov, 2025 | npm higgs-markdown-pdf-kaus-helmet |
Malicious release: Malicious code in hologram-jekyll-radiometric-bellatrix (npm) MAL-2025-187362 | Malicious | Not scored | 13 Nov, 2025 | npm hologram-jekyll-radiometric-bellatrix |
Malicious release: Malicious code in hologram-oscillation-config-nestjs (npm) MAL-2025-187363 | Malicious | Not scored | 13 Nov, 2025 | npm hologram-oscillation-config-nestjs |
Malicious release: Malicious code in holography-antares-enif-callback (npm) MAL-2025-187364 | Malicious | Not scored | 13 Nov, 2025 | npm holography-antares-enif-callback |
Malicious release: Malicious code in holography-commitizen-kardashevscale-morgan (npm) MAL-2025-187365 | Malicious | Not scored | 13 Nov, 2025 | npm holography-commitizen-kardashevscale-morgan |
Malicious release: Malicious code in holography-commitlint-xml-unuk (npm) MAL-2025-187366 | Malicious | Not scored | 13 Nov, 2025 | npm holography-commitlint-xml-unuk |
Malicious release: Malicious code in holography-development-nightmare-uranology (npm) MAL-2025-187367 | Malicious | Not scored | 13 Nov, 2025 | npm holography-development-nightmare-uranology |
Malicious release: Malicious code in holography-hercules-janus-postcss (npm) MAL-2025-187368 | Malicious | Not scored | 13 Nov, 2025 | npm holography-hercules-janus-postcss |
Malicious release: Malicious code in hot-awk-authorize-float-interface (npm) MAL-2025-187369 | Malicious | Not scored | 13 Nov, 2025 | npm hot-awk-authorize-float-interface |
Malicious release: Malicious code in hot-float-moon-unix-fork (npm) MAL-2025-187370 | Malicious | Not scored | 13 Nov, 2025 | npm hot-float-moon-unix-fork |
Malicious release: Malicious code in hot-thread-cold-fast-epsilon (npm) MAL-2025-187371 | Malicious | Not scored | 13 Nov, 2025 | npm hot-thread-cold-fast-epsilon |
Malicious release: Malicious code in html-webpack-plugin-atlas-global-lacerta (npm) MAL-2025-187372 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-atlas-global-lacerta |
Malicious release: Malicious code in html-webpack-plugin-deimos-toml-command (npm) MAL-2025-187373 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-deimos-toml-command |
Malicious release: Malicious code in html-webpack-plugin-hologram-stream-install (npm) MAL-2025-187374 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-hologram-stream-install |
Malicious release: Malicious code in html-webpack-plugin-multiverse-proteomics-blackhole (npm) MAL-2025-187375 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-multiverse-proteomics-blackhole |
Malicious release: Malicious code in html-webpack-plugin-promise-meteor-dactyl (npm) MAL-2025-187376 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-promise-meteor-dactyl |
Malicious release: Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm) MAL-2025-187377 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-taphonomy-test-coronalmassejection |
Malicious release: Malicious code in html-webpack-plugin-vega-atlas-fetch (npm) MAL-2025-187378 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-vega-atlas-fetch |
Malicious release: Malicious code in html-webpack-plugin-version-vulcan-rollup (npm) MAL-2025-187379 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-version-vulcan-rollup |
Malicious release: Malicious code in html-webpack-plugin-wavefunction-local-ora (npm) MAL-2025-187380 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-wavefunction-local-ora |
Malicious release: Malicious code in html-webpack-plugin-zenobia-nebula-antares (npm) MAL-2025-187381 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-zenobia-nebula-antares |
Malicious release: Malicious code in hugo-build-configstore-rollup-plugin (npm) MAL-2025-187382 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-build-configstore-rollup-plugin |
Malicious release: Malicious code in hugo-capella-janus-nucleosynthesis (npm) MAL-2025-187383 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-capella-janus-nucleosynthesis |
Malicious release: Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm) MAL-2025-187384 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-mini-css-extract-plugin-ophiuchus-convict |
Malicious release: Malicious code in hugo-miranda-prettier-stylelint-xenon (npm) MAL-2025-187385 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-miranda-prettier-stylelint-xenon |
Malicious release: Malicious code in hugo-nashira-boson-passport (npm) MAL-2025-187386 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-nashira-boson-passport |
Malicious release: Malicious code in hugo-plutology-comet-cluster (npm) MAL-2025-187387 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-plutology-comet-cluster |
Malicious release: Malicious code in hugo-unuk-leda-altair (npm) MAL-2025-187388 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-unuk-leda-altair |
Malicious release: Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm) MAL-2025-187389 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-wavefunction-dotenv-parse-variables-parallax |
Malicious release: Malicious code in husky-build-toml-troposphere (npm) MAL-2025-187390 | Malicious | Not scored | 13 Nov, 2025 | npm husky-build-toml-troposphere |
Malicious release: Malicious code in husky-bulma-nebula-concurrently (npm) MAL-2025-187391 | Malicious | Not scored | 13 Nov, 2025 | npm husky-bulma-nebula-concurrently |
Malicious release: Malicious code in husky-despina-readable-oscillation (npm) MAL-2025-187392 | Malicious | Not scored | 13 Nov, 2025 | npm husky-despina-readable-oscillation |
Malicious release: Malicious code in husky-eridanus-quasar-geckodriver (npm) MAL-2025-187393 | Malicious | Not scored | 13 Nov, 2025 | npm husky-eridanus-quasar-geckodriver |
Malicious release: Malicious code in husky-glaciology-weywot-rest (npm) MAL-2025-187394 | Malicious | Not scored | 13 Nov, 2025 | npm husky-glaciology-weywot-rest |
Malicious release: Malicious code in husky-helios-wezen-nextjs (npm) MAL-2025-187395 | Malicious | Not scored | 13 Nov, 2025 | npm husky-helios-wezen-nextjs |
Malicious release: Malicious code in hydra-cryovolcano-darkmatter-quasarjet (npm) MAL-2025-187396 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-cryovolcano-darkmatter-quasarjet |
Malicious release: Malicious code in hydra-duplex-npm-ophiuchus (npm) MAL-2025-187397 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-duplex-npm-ophiuchus |
Malicious release: Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin (npm) MAL-2025-187398 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-hawkingradiation-markdownlint-mini-css-extract-plugin |