Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in index-chi-grep-nu-wind (npm) MAL-2025-187449 | Malicious | Not scored | 13 Nov, 2025 | npm index-chi-grep-nu-wind |
Malicious release: Malicious code in index-error-cold-earth-encode (npm) MAL-2025-187450 | Malicious | Not scored | 13 Nov, 2025 | npm index-error-cold-earth-encode |
Malicious release: Malicious code in index-gamma-authorize-deploy-async (npm) MAL-2025-187451 | Malicious | Not scored | 13 Nov, 2025 | npm index-gamma-authorize-deploy-async |
Malicious release: Malicious code in index-grid-unix-long-kappa (npm) MAL-2025-187452 | Malicious | Not scored | 13 Nov, 2025 | npm index-grid-unix-long-kappa |
Malicious release: Malicious code in index-load-rain-gamma-log (npm) MAL-2025-187453 | Malicious | Not scored | 13 Nov, 2025 | npm index-load-rain-gamma-log |
Malicious release: Malicious code in index-short-java-phi-virtualize (npm) MAL-2025-187454 | Malicious | Not scored | 13 Nov, 2025 | npm index-short-java-phi-virtualize |
Malicious release: Malicious code in index-wind-info-emulate-fork (npm) MAL-2025-187455 | Malicious | Not scored | 13 Nov, 2025 | npm index-wind-info-emulate-fork |
Malicious release: Malicious code in indus-coronalmassejection-sass-loader-virgo (npm) MAL-2025-187456 | Malicious | Not scored | 13 Nov, 2025 | npm indus-coronalmassejection-sass-loader-virgo |
Malicious release: Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo (npm) MAL-2025-187457 | Malicious | Not scored | 13 Nov, 2025 | npm indus-cybernetics-prettier-plugin-markdown-pavo |
Malicious release: Malicious code in indus-farout-carpo-astrobiology (npm) MAL-2025-187458 | Malicious | Not scored | 13 Nov, 2025 | npm indus-farout-carpo-astrobiology |
Malicious release: Malicious code in indus-neptune-typeorm-io (npm) MAL-2025-187459 | Malicious | Not scored | 13 Nov, 2025 | npm indus-neptune-typeorm-io |
Malicious release: Malicious code in indus-reveal-md-gulp-neptune (npm) MAL-2025-187460 | Malicious | Not scored | 13 Nov, 2025 | npm indus-reveal-md-gulp-neptune |
Malicious release: Malicious code in indus-triton-polaris-nextjs (npm) MAL-2025-187461 | Malicious | Not scored | 13 Nov, 2025 | npm indus-triton-polaris-nextjs |
Malicious release: Malicious code in indus-virgo-publish-taurus (npm) MAL-2025-187462 | Malicious | Not scored | 13 Nov, 2025 | npm indus-virgo-publish-taurus |
Malicious release: Malicious code in inflation-antd-dependencies-phoenix (npm) MAL-2025-187463 | Malicious | Not scored | 13 Nov, 2025 | npm inflation-antd-dependencies-phoenix |
Malicious release: Malicious code in inflation-apollo-rocket-higgs (npm) MAL-2025-187464 | Malicious | Not scored | 13 Nov, 2025 | npm inflation-apollo-rocket-higgs |
Malicious release: Malicious code in inflation-hercules-websockets-private (npm) MAL-2025-187465 | Malicious | Not scored | 13 Nov, 2025 | npm inflation-hercules-websockets-private |
Malicious release: Malicious code in inflation-technocracy-css-minimizer-webpack-plugin-await (npm) MAL-2025-187466 | Malicious | Not scored | 13 Nov, 2025 | npm inflation-technocracy-css-minimizer-webpack-plugin-await |
Malicious release: Malicious code in inflation-weywot-comet-xo (npm) MAL-2025-187467 | Malicious | Not scored | 13 Nov, 2025 | npm inflation-weywot-comet-xo |
Malicious release: Malicious code in info-byte-simulate-cat-sudo (npm) MAL-2025-187468 | Malicious | Not scored | 13 Nov, 2025 | npm info-byte-simulate-cat-sudo |
Malicious release: Malicious code in info-user-wind-book-sanitize (npm) MAL-2025-187469 | Malicious | Not scored | 13 Nov, 2025 | npm info-user-wind-book-sanitize |
Malicious release: Malicious code in ini-barnard-juno-shelljs (npm) MAL-2025-187470 | Malicious | Not scored | 13 Nov, 2025 | npm ini-barnard-juno-shelljs |
Malicious release: Malicious code in ini-koa-adonis-astrometry (npm) MAL-2025-187471 | Malicious | Not scored | 13 Nov, 2025 | npm ini-koa-adonis-astrometry |
Malicious release: Malicious code in ini-mongodb-got-socketio (npm) MAL-2025-187472 | Malicious | Not scored | 13 Nov, 2025 | npm ini-mongodb-got-socketio |
Malicious release: Malicious code in ini-quito-stratosphere-slides (npm) MAL-2025-187473 | Malicious | Not scored | 13 Nov, 2025 | npm ini-quito-stratosphere-slides |
Malicious release: Malicious code in init-charon-terser-upgrade (npm) MAL-2025-187474 | Malicious | Not scored | 13 Nov, 2025 | npm init-charon-terser-upgrade |
Malicious release: Malicious code in init-enceladus-quark-terraforming (npm) MAL-2025-187475 | Malicious | Not scored | 13 Nov, 2025 | npm init-enceladus-quark-terraforming |
Malicious release: Malicious code in init-mui-exobiology-local (npm) MAL-2025-187476 | Malicious | Not scored | 13 Nov, 2025 | npm init-mui-exobiology-local |
Malicious release: Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus (npm) MAL-2025-187477 | Malicious | Not scored | 13 Nov, 2025 | npm init-optimize-css-assets-webpack-plugin-nodejs-grus |
Malicious release: Malicious code in init-parcel-run-script-hugo (npm) MAL-2025-187478 | Malicious | Not scored | 13 Nov, 2025 | npm init-parcel-run-script-hugo |
Malicious release: Malicious code in init-publish-boson-apex (npm) MAL-2025-187479 | Malicious | Not scored | 13 Nov, 2025 | npm init-publish-boson-apex |
Malicious release: Malicious code in init-rest-sedna-gacrux (npm) MAL-2025-187480 | Malicious | Not scored | 13 Nov, 2025 | npm init-rest-sedna-gacrux |
Malicious release: Malicious code in init-venus-sync-figures (npm) MAL-2025-187481 | Malicious | Not scored | 13 Nov, 2025 | npm init-venus-sync-figures |
Malicious release: Malicious code in innercore-alphard-eslint-config-xerxes (npm) MAL-2025-187482 | Malicious | Not scored | 13 Nov, 2025 | npm innercore-alphard-eslint-config-xerxes |
Malicious release: Malicious code in innercore-biohacking-aether-inflation (npm) MAL-2025-187483 | Malicious | Not scored | 13 Nov, 2025 | npm innercore-biohacking-aether-inflation |
Malicious release: Malicious code in innercore-magnetar-xerxes-galaxy (npm) MAL-2025-187484 | Malicious | Not scored | 13 Nov, 2025 | npm innercore-magnetar-xerxes-galaxy |
Malicious release: Malicious code in innercore-superposition-lint-staged-adonis (npm) MAL-2025-187485 | Malicious | Not scored | 13 Nov, 2025 | npm innercore-superposition-lint-staged-adonis |
Malicious release: Malicious code in innercore-yildun-blaze-robotics (npm) MAL-2025-187486 | Malicious | Not scored | 13 Nov, 2025 | npm innercore-yildun-blaze-robotics |
Malicious release: Malicious code in inquirer-flare-sass-loader-tectonic (npm) MAL-2025-187487 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-flare-sass-loader-tectonic |
Malicious release: Malicious code in inquirer-loop-airbnb-proxima (npm) MAL-2025-187488 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-loop-airbnb-proxima |
Malicious release: Malicious code in inquirer-quasar-polaris-aquarius (npm) MAL-2025-187489 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-quasar-polaris-aquarius |
Malicious release: Malicious code in inquirer-resonance-stratosphere-zenobia (npm) MAL-2025-187490 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-resonance-stratosphere-zenobia |
Malicious release: Malicious code in inquirer-stream-metabolomics-uninstall (npm) MAL-2025-187491 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-stream-metabolomics-uninstall |
Malicious release: Malicious code in inquirer-technosignature-slidev-sagitta (npm) MAL-2025-187492 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-technosignature-slidev-sagitta |
Malicious release: Malicious code in inquirer-winston-commitlint-cosmiconfig (npm) MAL-2025-187493 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-winston-commitlint-cosmiconfig |
Malicious release: Malicious code in install-bunyan-bellatrix-impulse (npm) MAL-2025-187494 | Malicious | Not scored | 13 Nov, 2025 | npm install-bunyan-bellatrix-impulse |
Malicious release: Malicious code in install-enceladus-mesosphere-superflare (npm) MAL-2025-187495 | Malicious | Not scored | 13 Nov, 2025 | npm install-enceladus-mesosphere-superflare |
Malicious release: Malicious code in install-enif-blitz-supervisor (npm) MAL-2025-187496 | Malicious | Not scored | 13 Nov, 2025 | npm install-enif-blitz-supervisor |
Malicious release: Malicious code in install-fork-mdx-websockets (npm) MAL-2025-187497 | Malicious | Not scored | 13 Nov, 2025 | npm install-fork-mdx-websockets |
Malicious release: Malicious code in install-geckodriver-blueshift-native (npm) MAL-2025-187498 | Malicious | Not scored | 13 Nov, 2025 | npm install-geckodriver-blueshift-native |