Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables (npm) MAL-2025-187699 | Malicious | Not scored | 13 Nov, 2025 | npm koa-eslint-plugin-corvus-dotenv-parse-variables |
Malicious release: Malicious code in koa-higgs-jasmine-wezen (npm) MAL-2025-187700 | Malicious | Not scored | 13 Nov, 2025 | npm koa-higgs-jasmine-wezen |
Malicious release: Malicious code in koa-prettier-stylelint-link-google (npm) MAL-2025-187701 | Malicious | Not scored | 13 Nov, 2025 | npm koa-prettier-stylelint-link-google |
Malicious release: Malicious code in koa-vega-zenith-canopus (npm) MAL-2025-187702 | Malicious | Not scored | 13 Nov, 2025 | npm koa-vega-zenith-canopus |
Malicious release: Malicious code in koa-version-scorpius-ceres (npm) MAL-2025-187703 | Malicious | Not scored | 13 Nov, 2025 | npm koa-version-scorpius-ceres |
Malicious release: Malicious code in kronos-buffer-titan-zephyr (npm) MAL-2025-187704 | Malicious | Not scored | 13 Nov, 2025 | npm kronos-buffer-titan-zephyr |
Malicious release: Malicious code in kronos-ichnology-dotenv-safe-seismology (npm) MAL-2025-187705 | Malicious | Not scored | 13 Nov, 2025 | npm kronos-ichnology-dotenv-safe-seismology |
Malicious release: Malicious code in kronos-inquirer-promise-dactyl (npm) MAL-2025-187706 | Malicious | Not scored | 13 Nov, 2025 | npm kronos-inquirer-promise-dactyl |
Malicious release: Malicious code in kronos-lynx-brane-venus (npm) MAL-2025-187707 | Malicious | Not scored | 13 Nov, 2025 | npm kronos-lynx-brane-venus |
Malicious release: Malicious code in kronos-phoebe-kronos-elektra (npm) MAL-2025-187708 | Malicious | Not scored | 13 Nov, 2025 | npm kronos-phoebe-kronos-elektra |
Malicious release: Malicious code in kronos-pipe-delphinus-centauri (npm) MAL-2025-187709 | Malicious | Not scored | 13 Nov, 2025 | npm kronos-pipe-delphinus-centauri |
Malicious release: Malicious code in kuiperbelt-nova-parsec-helios (npm) MAL-2025-187710 | Malicious | Not scored | 13 Nov, 2025 | npm kuiperbelt-nova-parsec-helios |
Malicious release: Malicious code in kuiperbelt-phoebe-native-abiogenesis (npm) MAL-2025-187711 | Malicious | Not scored | 13 Nov, 2025 | npm kuiperbelt-phoebe-native-abiogenesis |
Malicious release: Malicious code in kuiperbelt-protractor-epigenetics-kardashevscale (npm) MAL-2025-187712 | Malicious | Not scored | 13 Nov, 2025 | npm kuiperbelt-protractor-epigenetics-kardashevscale |
Malicious release: Malicious code in kuiperbelt-taurus-csv-ceres (npm) MAL-2025-187713 | Malicious | Not scored | 13 Nov, 2025 | npm kuiperbelt-taurus-csv-ceres |
Malicious release: Malicious code in kuiperbelt-yakutsk-bioinformatics-express (npm) MAL-2025-187714 | Malicious | Not scored | 13 Nov, 2025 | npm kuiperbelt-yakutsk-bioinformatics-express |
Malicious release: Malicious code in lacerta-auth0-callisto-dorado (npm) MAL-2025-187715 | Malicious | Not scored | 13 Nov, 2025 | npm lacerta-auth0-callisto-dorado |
Malicious release: Malicious code in lacerta-betelgeuse-xanthus-upgrade (npm) MAL-2025-187716 | Malicious | Not scored | 13 Nov, 2025 | npm lacerta-betelgeuse-xanthus-upgrade |
Malicious release: Malicious code in lacerta-blackhole-juno-capella (npm) MAL-2025-187717 | Malicious | Not scored | 13 Nov, 2025 | npm lacerta-blackhole-juno-capella |
Malicious release: Malicious code in lacerta-ceres-jwt-stream (npm) MAL-2025-187718 | Malicious | Not scored | 13 Nov, 2025 | npm lacerta-ceres-jwt-stream |
Malicious release: Malicious code in lacerta-chalk-ini-neptune (npm) MAL-2025-187719 | Malicious | Not scored | 13 Nov, 2025 | npm lacerta-chalk-ini-neptune |
Malicious release: Malicious code in lacerta-paleobotany-convict-babel (npm) MAL-2025-187720 | Malicious | Not scored | 13 Nov, 2025 | npm lacerta-paleobotany-convict-babel |
Malicious release: Malicious code in lacerta-polaris-tool-resolvers (npm) MAL-2025-187721 | Malicious | Not scored | 13 Nov, 2025 | npm lacerta-polaris-tool-resolvers |
Malicious release: Malicious code in lacerta-style-loader-mini-css-extract-plugin-less (npm) MAL-2025-187722 | Malicious | Not scored | 13 Nov, 2025 | npm lacerta-style-loader-mini-css-extract-plugin-less |
Malicious release: Malicious code in lambda-byte-sigma-static-reject (npm) MAL-2025-187723 | Malicious | Not scored | 13 Nov, 2025 | npm lambda-byte-sigma-static-reject |
Malicious release: Malicious code in lambda-cloud-class-public-meta (npm) MAL-2025-187724 | Malicious | Not scored | 13 Nov, 2025 | npm lambda-cloud-class-public-meta |
Malicious release: Malicious code in lambda-daemon-cron-delta-link (npm) MAL-2025-187725 | Malicious | Not scored | 13 Nov, 2025 | npm lambda-daemon-cron-delta-link |
Malicious release: Malicious code in lambda-quick-monitor-optimize-book (npm) MAL-2025-187726 | Malicious | Not scored | 13 Nov, 2025 | npm lambda-quick-monitor-optimize-book |
Malicious release: Malicious code in lambda-transpile-gamma-omicron-resolve (npm) MAL-2025-187727 | Malicious | Not scored | 13 Nov, 2025 | npm lambda-transpile-gamma-omicron-resolve |
Malicious release: Malicious code in leda-cassini-dactyl-mongodb (npm) MAL-2025-187728 | Malicious | Not scored | 13 Nov, 2025 | npm leda-cassini-dactyl-mongodb |
Malicious release: Malicious code in leda-command-aquarius-leda (npm) MAL-2025-187729 | Malicious | Not scored | 13 Nov, 2025 | npm leda-command-aquarius-leda |
Malicious release: Malicious code in leda-electron-builder-chromedriver-nodemon (npm) MAL-2025-187730 | Malicious | Not scored | 13 Nov, 2025 | npm leda-electron-builder-chromedriver-nodemon |
Malicious release: Malicious code in leda-epigenetics-redshift-geochronology (npm) MAL-2025-187731 | Malicious | Not scored | 13 Nov, 2025 | npm leda-epigenetics-redshift-geochronology |
Malicious release: Malicious code in leda-gemini-saturnology-jovian (npm) MAL-2025-187732 | Malicious | Not scored | 13 Nov, 2025 | npm leda-gemini-saturnology-jovian |
Malicious release: Malicious code in leda-hercules-restart-upgrade (npm) MAL-2025-187733 | Malicious | Not scored | 13 Nov, 2025 | npm leda-hercules-restart-upgrade |
Malicious release: Malicious code in leda-jsonp-dependencies-eslint-config (npm) MAL-2025-187734 | Malicious | Not scored | 13 Nov, 2025 | npm leda-jsonp-dependencies-eslint-config |
Malicious release: Malicious code in leda-kaus-bellatrix-leda (npm) MAL-2025-187735 | Malicious | Not scored | 13 Nov, 2025 | npm leda-kaus-bellatrix-leda |
Malicious release: Malicious code in leda-loopback-markdown-pdf-quasar (npm) MAL-2025-187736 | Malicious | Not scored | 13 Nov, 2025 | npm leda-loopback-markdown-pdf-quasar |
Malicious release: Malicious code in leda-morgan-xanthus-ophiuchus (npm) MAL-2025-187737 | Malicious | Not scored | 13 Nov, 2025 | npm leda-morgan-xanthus-ophiuchus |
Malicious release: Malicious code in leda-pegasus-magnetosphere-sagitta (npm) MAL-2025-187738 | Malicious | Not scored | 13 Nov, 2025 | npm leda-pegasus-magnetosphere-sagitta |
Malicious release: Malicious code in leda-pm2-lacerta-speleology (npm) MAL-2025-187739 | Malicious | Not scored | 13 Nov, 2025 | npm leda-pm2-lacerta-speleology |
Malicious release: Malicious code in lepton-async-archaeogenetics-exoplanet (npm) MAL-2025-187740 | Malicious | Not scored | 13 Nov, 2025 | npm lepton-async-archaeogenetics-exoplanet |
Malicious release: Malicious code in lepton-cache-soap-hexo (npm) MAL-2025-187741 | Malicious | Not scored | 13 Nov, 2025 | npm lepton-cache-soap-hexo |
Malicious release: Malicious code in lepton-husky-phenomic-hermes (npm) MAL-2025-187742 | Malicious | Not scored | 13 Nov, 2025 | npm lepton-husky-phenomic-hermes |
Malicious release: Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm) MAL-2025-187743 | Malicious | Not scored | 13 Nov, 2025 | npm lepton-pyxis-aldebaran-dotenv-parse-variables |
Malicious release: Malicious code in lepton-sociobiology-duplex-nestjs (npm) MAL-2025-187744 | Malicious | Not scored | 13 Nov, 2025 | npm lepton-sociobiology-duplex-nestjs |
Malicious release: Malicious code in lepton-weywot-mira-pino-pretty (npm) MAL-2025-187745 | Malicious | Not scored | 13 Nov, 2025 | npm lepton-weywot-mira-pino-pretty |
Malicious release: Malicious code in lepton-xanthus-paleoanthropology-abiogenesis (npm) MAL-2025-187746 | Malicious | Not scored | 13 Nov, 2025 | npm lepton-xanthus-paleoanthropology-abiogenesis |
Malicious release: Malicious code in less-antimatter-slides-phoebe (npm) MAL-2025-187747 | Malicious | Not scored | 13 Nov, 2025 | npm less-antimatter-slides-phoebe |
Malicious release: Malicious code in less-astrochemistry-ceres-halley (npm) MAL-2025-187748 | Malicious | Not scored | 13 Nov, 2025 | npm less-astrochemistry-ceres-halley |