Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in javascript-magnetar-epimetheus-figures (npm) MAL-2025-187599 | Malicious | Not scored | 13 Nov, 2025 | npm javascript-magnetar-epimetheus-figures |
Malicious release: Malicious code in javascript-start-halley-eclipse (npm) MAL-2025-187600 | Malicious | Not scored | 13 Nov, 2025 | npm javascript-start-halley-eclipse |
Malicious release: Malicious code in jekyll-deneb-uglify-js-paleobotany (npm) MAL-2025-187601 | Malicious | Not scored | 13 Nov, 2025 | npm jekyll-deneb-uglify-js-paleobotany |
Malicious release: Malicious code in jekyll-less-npm-local (npm) MAL-2025-187602 | Malicious | Not scored | 13 Nov, 2025 | npm jekyll-less-npm-local |
Malicious release: Malicious code in jekyll-nightmare-juno-eclipse (npm) MAL-2025-187603 | Malicious | Not scored | 13 Nov, 2025 | npm jekyll-nightmare-juno-eclipse |
Malicious release: Malicious code in jekyll-resolvers-quark-epimetheus (npm) MAL-2025-187604 | Malicious | Not scored | 13 Nov, 2025 | npm jekyll-resolvers-quark-epimetheus |
Malicious release: Malicious code in jekyll-resolvers-quark-xenobiology (npm) MAL-2025-187605 | Malicious | Not scored | 13 Nov, 2025 | npm jekyll-resolvers-quark-xenobiology |
Malicious release: Malicious code in jekyll-reveal-md-redgiant-prettier-plugin-markdown (npm) MAL-2025-187606 | Malicious | Not scored | 13 Nov, 2025 | npm jekyll-reveal-md-redgiant-prettier-plugin-markdown |
Malicious release: Malicious code in jest-astro-despina-aurora (npm) MAL-2025-187607 | Malicious | Not scored | 13 Nov, 2025 | npm jest-astro-despina-aurora |
Malicious release: Malicious code in jest-titan-postcss-loader-galaxy (npm) MAL-2025-187608 | Malicious | Not scored | 13 Nov, 2025 | npm jest-titan-postcss-loader-galaxy |
Malicious release: Malicious code in jovian-asteroid-tectonophysics-bootstrap (npm) MAL-2025-187609 | Malicious | Not scored | 13 Nov, 2025 | npm jovian-asteroid-tectonophysics-bootstrap |
Malicious release: Malicious code in jovian-development-meissa-configstore (npm) MAL-2025-187610 | Malicious | Not scored | 13 Nov, 2025 | npm jovian-development-meissa-configstore |
Malicious release: Malicious code in jovian-less-loader-draco-wasat (npm) MAL-2025-187611 | Malicious | Not scored | 13 Nov, 2025 | npm jovian-less-loader-draco-wasat |
Malicious release: Malicious code in jovian-nodemon-winston-andromeda (npm) MAL-2025-187612 | Malicious | Not scored | 13 Nov, 2025 | npm jovian-nodemon-winston-andromeda |
Malicious release: Malicious code in jovian-postgres-webdriver-mocha-await (npm) MAL-2025-187613 | Malicious | Not scored | 13 Nov, 2025 | npm jovian-postgres-webdriver-mocha-await |
Malicious release: Malicious code in jovian-sass-loader-native-cassini (npm) MAL-2025-187614 | Malicious | Not scored | 13 Nov, 2025 | npm jovian-sass-loader-native-cassini |
Malicious release: Malicious code in joviology-betelgeuse-saturnology-webdriverio (npm) MAL-2025-187615 | Malicious | Not scored | 13 Nov, 2025 | npm joviology-betelgeuse-saturnology-webdriverio |
Malicious release: Malicious code in joviology-exobiology-antares-webpack (npm) MAL-2025-187616 | Malicious | Not scored | 13 Nov, 2025 | npm joviology-exobiology-antares-webpack |
Malicious release: Malicious code in joviology-heka-accretion-speleology (npm) MAL-2025-187617 | Malicious | Not scored | 13 Nov, 2025 | npm joviology-heka-accretion-speleology |
Malicious release: Malicious code in joviology-mocha-cluster-redshift (npm) MAL-2025-187618 | Malicious | Not scored | 13 Nov, 2025 | npm joviology-mocha-cluster-redshift |
Malicious release: Malicious code in joviology-nuxtjs-ursa-lacerta (npm) MAL-2025-187619 | Malicious | Not scored | 13 Nov, 2025 | npm joviology-nuxtjs-ursa-lacerta |
Malicious release: Malicious code in joviology-standard-iota-outercore (npm) MAL-2025-187620 | Malicious | Not scored | 13 Nov, 2025 | npm joviology-standard-iota-outercore |
Malicious release: Malicious code in json-apex-bellatrix-docusaurus (npm) MAL-2025-187621 | Malicious | Not scored | 13 Nov, 2025 | npm json-apex-bellatrix-docusaurus |
Malicious release: Malicious code in json-apollo-rate-limiter-cross-env (npm) MAL-2025-187622 | Malicious | Not scored | 13 Nov, 2025 | npm json-apollo-rate-limiter-cross-env |
Malicious release: Malicious code in json-babel-regulus-void (npm) MAL-2025-187623 | Malicious | Not scored | 13 Nov, 2025 | npm json-babel-regulus-void |
Malicious release: Malicious code in json-docusaurus-terser-aurora (npm) MAL-2025-187624 | Malicious | Not scored | 13 Nov, 2025 | npm json-docusaurus-terser-aurora |
Malicious release: Malicious code in json-geochemistry-exec-publish (npm) MAL-2025-187625 | Malicious | Not scored | 13 Nov, 2025 | npm json-geochemistry-exec-publish |
Malicious release: Malicious code in json-miranda-karma-auth0 (npm) MAL-2025-187626 | Malicious | Not scored | 13 Nov, 2025 | npm json-miranda-karma-auth0 |
Malicious release: Malicious code in json-protractor-nestjs-auth0 (npm) MAL-2025-187627 | Malicious | Not scored | 13 Nov, 2025 | npm json-protractor-nestjs-auth0 |
Malicious release: Malicious code in json-stream-aquarius-cygnus (npm) MAL-2025-187628 | Malicious | Not scored | 13 Nov, 2025 | npm json-stream-aquarius-cygnus |
Malicious release: Malicious code in json-superagent-helios-ablation (npm) MAL-2025-187629 | Malicious | Not scored | 13 Nov, 2025 | npm json-superagent-helios-ablation |
Malicious release: Malicious code in jsonp-hydra-neuromorphic-void (npm) MAL-2025-187630 | Malicious | Not scored | 13 Nov, 2025 | npm jsonp-hydra-neuromorphic-void |
Malicious release: Malicious code in jsonp-lacerta-eris-octans (npm) MAL-2025-187631 | Malicious | Not scored | 13 Nov, 2025 | npm jsonp-lacerta-eris-octans |
Malicious release: Malicious code in juno-areology-dorado-webdriver-mocha (npm) MAL-2025-187632 | Malicious | Not scored | 13 Nov, 2025 | npm juno-areology-dorado-webdriver-mocha |
Malicious release: Malicious code in juno-eleventy-prettier-stylelint-rimraf (npm) MAL-2025-187633 | Malicious | Not scored | 13 Nov, 2025 | npm juno-eleventy-prettier-stylelint-rimraf |
Malicious release: Malicious code in juno-ganymede-inquirer-ultra (npm) MAL-2025-187634 | Malicious | Not scored | 13 Nov, 2025 | npm juno-ganymede-inquirer-ultra |
Malicious release: Malicious code in juno-ichnology-dotenv-safe-javascript (npm) MAL-2025-187635 | Malicious | Not scored | 13 Nov, 2025 | npm juno-ichnology-dotenv-safe-javascript |
Malicious release: Malicious code in juno-proxima-wolf-tailwindcss (npm) MAL-2025-187636 | Malicious | Not scored | 13 Nov, 2025 | npm juno-proxima-wolf-tailwindcss |
Malicious release: Malicious code in juno-pyxis-barnard-perturbation (npm) MAL-2025-187637 | Malicious | Not scored | 13 Nov, 2025 | npm juno-pyxis-barnard-perturbation |
Malicious release: Malicious code in juno-saturnology-sass-loader-joviology (npm) MAL-2025-187638 | Malicious | Not scored | 13 Nov, 2025 | npm juno-saturnology-sass-loader-joviology |
Malicious release: Malicious code in juno-uglify-js-tethys-thermochronology (npm) MAL-2025-187639 | Malicious | Not scored | 13 Nov, 2025 | npm juno-uglify-js-tethys-thermochronology |
Malicious release: Malicious code in jupiter-aether-markdown-pdf-websockets (npm) MAL-2025-187640 | Malicious | Not scored | 13 Nov, 2025 | npm jupiter-aether-markdown-pdf-websockets |
Malicious release: Malicious code in jupiter-fork-axios-magellan (npm) MAL-2025-187641 | Malicious | Not scored | 13 Nov, 2025 | npm jupiter-fork-axios-magellan |
Malicious release: Malicious code in jupiter-scripts-html-webpack-plugin-blitz (npm) MAL-2025-187642 | Malicious | Not scored | 13 Nov, 2025 | npm jupiter-scripts-html-webpack-plugin-blitz |
Malicious release: Malicious code in justmeteai (npm) MAL-2025-187643 | Malicious | Not scored | 13 Nov, 2025 | npm justmeteai |
Malicious release: Malicious code in jwt-antares-chakra-ui-andromeda (npm) MAL-2025-187644 | Malicious | Not scored | 13 Nov, 2025 | npm jwt-antares-chakra-ui-andromeda |
Malicious release: Malicious code in jwt-firebase-izar-gulp (npm) MAL-2025-187645 | Malicious | Not scored | 13 Nov, 2025 | npm jwt-firebase-izar-gulp |
Malicious release: Malicious code in jwt-jwt-nodejs-publish (npm) MAL-2025-187646 | Malicious | Not scored | 13 Nov, 2025 | npm jwt-jwt-nodejs-publish |
Malicious release: Malicious code in jwt-mutation-dagda-octans (npm) MAL-2025-187647 | Malicious | Not scored | 13 Nov, 2025 | npm jwt-mutation-dagda-octans |
Malicious release: Malicious code in jwt-polaris-accretion-transform (npm) MAL-2025-187648 | Malicious | Not scored | 13 Nov, 2025 | npm jwt-polaris-accretion-transform |