Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in iota-zephyr-nova-octans (npm) MAL-2025-187549 | Malicious | Not scored | 13 Nov, 2025 | npm iota-zephyr-nova-octans |
Malicious release: Malicious code in isostasy-ganymede-archaeogenetics-markdown (npm) MAL-2025-187550 | Malicious | Not scored | 13 Nov, 2025 | npm isostasy-ganymede-archaeogenetics-markdown |
Malicious release: Malicious code in isostasy-loopback-docusaurus-inflation (npm) MAL-2025-187551 | Malicious | Not scored | 13 Nov, 2025 | npm isostasy-loopback-docusaurus-inflation |
Malicious release: Malicious code in isostasy-meteor-passport-npm (npm) MAL-2025-187552 | Malicious | Not scored | 13 Nov, 2025 | npm isostasy-meteor-passport-npm |
Malicious release: Malicious code in isostasy-paleoclimatology-thuban-augmentedreality (npm) MAL-2025-187553 | Malicious | Not scored | 13 Nov, 2025 | npm isostasy-paleoclimatology-thuban-augmentedreality |
Malicious release: Malicious code in isostasy-rate-limiter-miranda-chalk (npm) MAL-2025-187554 | Malicious | Not scored | 13 Nov, 2025 | npm isostasy-rate-limiter-miranda-chalk |
Malicious release: Malicious code in isostasy-slides-augmentedreality-jabbah (npm) MAL-2025-187555 | Malicious | Not scored | 13 Nov, 2025 | npm isostasy-slides-augmentedreality-jabbah |
Malicious release: Malicious code in izar-mini-css-extract-plugin-hercules-nightmare (npm) MAL-2025-187556 | Malicious | Not scored | 13 Nov, 2025 | npm izar-mini-css-extract-plugin-hercules-nightmare |
Malicious release: Malicious code in izar-ora-exec-genomics (npm) MAL-2025-187557 | Malicious | Not scored | 13 Nov, 2025 | npm izar-ora-exec-genomics |
Malicious release: Malicious code in izar-string-command-neutronstar (npm) MAL-2025-187558 | Malicious | Not scored | 13 Nov, 2025 | npm izar-string-command-neutronstar |
Malicious release: Malicious code in jabbah-areology-archaeometry-vega (npm) MAL-2025-187559 | Malicious | Not scored | 13 Nov, 2025 | npm jabbah-areology-archaeometry-vega |
Malicious release: Malicious code in jabbah-blitz-kardashevscale-markdown (npm) MAL-2025-187560 | Malicious | Not scored | 13 Nov, 2025 | npm jabbah-blitz-kardashevscale-markdown |
Malicious release: Malicious code in jabbah-colors-parsec-chromedriver (npm) MAL-2025-187561 | Malicious | Not scored | 13 Nov, 2025 | npm jabbah-colors-parsec-chromedriver |
Malicious release: Malicious code in jabbah-pegasus-umbriel-perseus (npm) MAL-2025-187562 | Malicious | Not scored | 13 Nov, 2025 | npm jabbah-pegasus-umbriel-perseus |
Malicious release: Malicious code in jabbah-titan-eslint-config-equinox (npm) MAL-2025-187563 | Malicious | Not scored | 13 Nov, 2025 | npm jabbah-titan-eslint-config-equinox |
Malicious release: Malicious code in jabbah-umbriel-io-soap (npm) MAL-2025-187564 | Malicious | Not scored | 13 Nov, 2025 | npm jabbah-umbriel-io-soap |
Malicious release: Malicious code in janus-aldebaran-middleware-paleontology (npm) MAL-2025-187565 | Malicious | Not scored | 13 Nov, 2025 | npm janus-aldebaran-middleware-paleontology |
Malicious release: Malicious code in janus-avior-superagent-ichnology (npm) MAL-2025-187566 | Malicious | Not scored | 13 Nov, 2025 | npm janus-avior-superagent-ichnology |
Malicious release: Malicious code in janus-centaurus-mutation-koa (npm) MAL-2025-187567 | Malicious | Not scored | 13 Nov, 2025 | npm janus-centaurus-mutation-koa |
Malicious release: Malicious code in janus-chai-umbriel-install (npm) MAL-2025-187568 | Malicious | Not scored | 13 Nov, 2025 | npm janus-chai-umbriel-install |
Malicious release: Malicious code in janus-dagda-query-ceres (npm) MAL-2025-187569 | Malicious | Not scored | 13 Nov, 2025 | npm janus-dagda-query-ceres |
Malicious release: Malicious code in janus-enceladus-supernova-panspermia (npm) MAL-2025-187570 | Malicious | Not scored | 13 Nov, 2025 | npm janus-enceladus-supernova-panspermia |
Malicious release: Malicious code in janus-enif-tardigrade-test (npm) MAL-2025-187571 | Malicious | Not scored | 13 Nov, 2025 | npm janus-enif-tardigrade-test |
Malicious release: Malicious code in janus-fomalhaut-rate-limiter-fusion (npm) MAL-2025-187572 | Malicious | Not scored | 13 Nov, 2025 | npm janus-fomalhaut-rate-limiter-fusion |
Malicious release: Malicious code in janus-greatfilter-cosmiconfig-ursa (npm) MAL-2025-187573 | Malicious | Not scored | 13 Nov, 2025 | npm janus-greatfilter-cosmiconfig-ursa |
Malicious release: Malicious code in janus-hapi-ganymede-solis (npm) MAL-2025-187574 | Malicious | Not scored | 13 Nov, 2025 | npm janus-hapi-ganymede-solis |
Malicious release: Malicious code in janus-mysql-delphinus-convict (npm) MAL-2025-187575 | Malicious | Not scored | 13 Nov, 2025 | npm janus-mysql-delphinus-convict |
Malicious release: Malicious code in janus-neptune-spectron-publish (npm) MAL-2025-187576 | Malicious | Not scored | 13 Nov, 2025 | npm janus-neptune-spectron-publish |
Malicious release: Malicious code in janus-petrology-sedimentology-polaris (npm) MAL-2025-187577 | Malicious | Not scored | 13 Nov, 2025 | npm janus-petrology-sedimentology-polaris |
Malicious release: Malicious code in janus-proxima-commitizen-auriga (npm) MAL-2025-187578 | Malicious | Not scored | 13 Nov, 2025 | npm janus-proxima-commitizen-auriga |
Malicious release: Malicious code in janus-radiant-avior-quito (npm) MAL-2025-187579 | Malicious | Not scored | 13 Nov, 2025 | npm janus-radiant-avior-quito |
Malicious release: Malicious code in janus-regulus-eclipse-castor (npm) MAL-2025-187580 | Malicious | Not scored | 13 Nov, 2025 | npm janus-regulus-eclipse-castor |
Malicious release: Malicious code in janus-remark-thuban-sails (npm) MAL-2025-187581 | Malicious | Not scored | 13 Nov, 2025 | npm janus-remark-thuban-sails |
Malicious release: Malicious code in janus-repository-acamar-jekyll (npm) MAL-2025-187582 | Malicious | Not scored | 13 Nov, 2025 | npm janus-repository-acamar-jekyll |
Malicious release: Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian (npm) MAL-2025-187583 | Malicious | Not scored | 13 Nov, 2025 | npm janus-robotics-optimize-css-assets-webpack-plugin-jovian |
Malicious release: Malicious code in janus-rocket-crust-xerxes (npm) MAL-2025-187584 | Malicious | Not scored | 13 Nov, 2025 | npm janus-rocket-crust-xerxes |
Malicious release: Malicious code in janus-sedimentology-higgs-biohacking (npm) MAL-2025-187585 | Malicious | Not scored | 13 Nov, 2025 | npm janus-sedimentology-higgs-biohacking |
Malicious release: Malicious code in jasmine-cypress-gravity-install (npm) MAL-2025-187586 | Malicious | Not scored | 13 Nov, 2025 | npm jasmine-cypress-gravity-install |
Malicious release: Malicious code in jasmine-ichnology-astro-proteomics (npm) MAL-2025-187587 | Malicious | Not scored | 13 Nov, 2025 | npm jasmine-ichnology-astro-proteomics |
Malicious release: Malicious code in jasmine-iota-apollo-postcss (npm) MAL-2025-187588 | Malicious | Not scored | 13 Nov, 2025 | npm jasmine-iota-apollo-postcss |
Malicious release: Malicious code in jasmine-karma-innercore-csrf (npm) MAL-2025-187589 | Malicious | Not scored | 13 Nov, 2025 | npm jasmine-karma-innercore-csrf |
Malicious release: Malicious code in jasmine-metalsmith-schema-sirius (npm) MAL-2025-187590 | Malicious | Not scored | 13 Nov, 2025 | npm jasmine-metalsmith-schema-sirius |
Malicious release: Malicious code in java-orchestrate-awk-process-virtualize (npm) MAL-2025-187591 | Malicious | Not scored | 13 Nov, 2025 | npm java-orchestrate-awk-process-virtualize |
Malicious release: Malicious code in java-short-string-java-yaml (npm) MAL-2025-187592 | Malicious | Not scored | 13 Nov, 2025 | npm java-short-string-java-yaml |
Malicious release: Malicious code in java-simple-void-fork-sudo (npm) MAL-2025-187593 | Malicious | Not scored | 13 Nov, 2025 | npm java-simple-void-fork-sudo |
Malicious release: Malicious code in java-socket-cluster-decode-catch (npm) MAL-2025-187594 | Malicious | Not scored | 13 Nov, 2025 | npm java-socket-cluster-decode-catch |
Malicious release: Malicious code in java-theta-theta-zero-static (npm) MAL-2025-187595 | Malicious | Not scored | 13 Nov, 2025 | npm java-theta-theta-zero-static |
Malicious release: Malicious code in javascript-async-enceladus-eslint-plugin (npm) MAL-2025-187596 | Malicious | Not scored | 13 Nov, 2025 | npm javascript-async-enceladus-eslint-plugin |
Malicious release: Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation (npm) MAL-2025-187597 | Malicious | Not scored | 13 Nov, 2025 | npm javascript-css-minimizer-webpack-plugin-geochronology-foundation |
Malicious release: Malicious code in javascript-hyperion-quantumfoam-rate-limiter (npm) MAL-2025-187598 | Malicious | Not scored | 13 Nov, 2025 | npm javascript-hyperion-quantumfoam-rate-limiter |