Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant (npm) MAL-2025-185615 | Malicious | Not scored | 13 Nov, 2025 | npm async-css-minimizer-webpack-plugin-heka-redgiant |
Malicious release: Malicious code in async-dotenv-pino-pretty-odin (npm) MAL-2025-185616 | Malicious | Not scored | 13 Nov, 2025 | npm async-dotenv-pino-pretty-odin |
Malicious release: Malicious code in async-encrypt-void-user-upsilon (npm) MAL-2025-185617 | Malicious | Not scored | 13 Nov, 2025 | npm async-encrypt-void-user-upsilon |
Malicious release: Malicious code in async-eta-try-balance-java (npm) MAL-2025-185618 | Malicious | Not scored | 13 Nov, 2025 | npm async-eta-try-balance-java |
Malicious release: Malicious code in async-graviton-webdriverio-quantum (npm) MAL-2025-185619 | Malicious | Not scored | 13 Nov, 2025 | npm async-graviton-webdriverio-quantum |
Malicious release: Malicious code in async-gridsome-xanadu-webdriver-mocha (npm) MAL-2025-185620 | Malicious | Not scored | 13 Nov, 2025 | npm async-gridsome-xanadu-webdriver-mocha |
Malicious release: Malicious code in async-integer-xml-void-tau (npm) MAL-2025-185621 | Malicious | Not scored | 13 Nov, 2025 | npm async-integer-xml-void-tau |
Malicious release: Malicious code in async-iota-pavo-quasar (npm) MAL-2025-185622 | Malicious | Not scored | 13 Nov, 2025 | npm async-iota-pavo-quasar |
Malicious release: Malicious code in async-kastra-archaeoastronomy-exobiology (npm) MAL-2025-185623 | Malicious | Not scored | 13 Nov, 2025 | npm async-kastra-archaeoastronomy-exobiology |
Malicious release: Malicious code in async-lynx-lithosphere-telesto (npm) MAL-2025-185624 | Malicious | Not scored | 13 Nov, 2025 | npm async-lynx-lithosphere-telesto |
Malicious release: Malicious code in async-parse-compile-sanitize-quick (npm) MAL-2025-185625 | Malicious | Not scored | 13 Nov, 2025 | npm async-parse-compile-sanitize-quick |
Malicious release: Malicious code in async-proxy-dog-refactor-nu (npm) MAL-2025-185626 | Malicious | Not scored | 13 Nov, 2025 | npm async-proxy-dog-refactor-nu |
Malicious release: Malicious code in async-psi-alpha-query-theta (npm) MAL-2025-185627 | Malicious | Not scored | 13 Nov, 2025 | npm async-psi-alpha-query-theta |
Malicious release: Malicious code in async-public-eslint-plugin-loop (npm) MAL-2025-185628 | Malicious | Not scored | 13 Nov, 2025 | npm async-public-eslint-plugin-loop |
Malicious release: Malicious code in async-readable-solis-leda (npm) MAL-2025-185629 | Malicious | Not scored | 13 Nov, 2025 | npm async-readable-solis-leda |
Malicious release: Malicious code in async-registry-build-xml (npm) MAL-2025-185630 | Malicious | Not scored | 13 Nov, 2025 | npm async-registry-build-xml |
Malicious release: Malicious code in async-virtualize-private-link-view (npm) MAL-2025-185631 | Malicious | Not scored | 13 Nov, 2025 | npm async-virtualize-private-link-view |
Malicious release: Malicious code in async-xerxes-filament-outercore (npm) MAL-2025-185632 | Malicious | Not scored | 13 Nov, 2025 | npm async-xerxes-filament-outercore |
Malicious release: Malicious code in async-yonder-hadron-meteor (npm) MAL-2025-185633 | Malicious | Not scored | 13 Nov, 2025 | npm async-yonder-hadron-meteor |
Malicious release: Malicious code in async-yonder-void-gravity (npm) MAL-2025-185634 | Malicious | Not scored | 13 Nov, 2025 | npm async-yonder-void-gravity |
Malicious release: Malicious code in atlas-browserify-rigel-mira (npm) MAL-2025-185635 | Malicious | Not scored | 13 Nov, 2025 | npm atlas-browserify-rigel-mira |
Malicious release: Malicious code in atlas-enif-enif-winston (npm) MAL-2025-185636 | Malicious | Not scored | 13 Nov, 2025 | npm atlas-enif-enif-winston |
Malicious release: Malicious code in atlas-miranda-jabbah-oberon (npm) MAL-2025-185637 | Malicious | Not scored | 13 Nov, 2025 | npm atlas-miranda-jabbah-oberon |
Malicious release: Malicious code in atlas-nanotechnology-polaris-meissa (npm) MAL-2025-185638 | Malicious | Not scored | 13 Nov, 2025 | npm atlas-nanotechnology-polaris-meissa |
Malicious release: Malicious code in atlas-ophiuchus-palynology-bunyan (npm) MAL-2025-185639 | Malicious | Not scored | 13 Nov, 2025 | npm atlas-ophiuchus-palynology-bunyan |
Malicious release: Malicious code in atlas-repository-nova-eclipse (npm) MAL-2025-185640 | Malicious | Not scored | 13 Nov, 2025 | npm atlas-repository-nova-eclipse |
Malicious release: Malicious code in atlas-standard-ursa-auth0 (npm) MAL-2025-185641 | Malicious | Not scored | 13 Nov, 2025 | npm atlas-standard-ursa-auth0 |
Malicious release: Malicious code in augmentedreality-fetch-gravity-hawkingradiation (npm) MAL-2025-185642 | Malicious | Not scored | 13 Nov, 2025 | npm augmentedreality-fetch-gravity-hawkingradiation |
Malicious release: Malicious code in augmentedreality-frontend-cz-conventional-changelog-neptunology (npm) MAL-2025-185643 | Malicious | Not scored | 13 Nov, 2025 | npm augmentedreality-frontend-cz-conventional-changelog-neptunology |
Malicious release: Malicious code in augmentedreality-mesosphere-style-loader-registry (npm) MAL-2025-185644 | Malicious | Not scored | 13 Nov, 2025 | npm augmentedreality-mesosphere-style-loader-registry |
Malicious release: Malicious code in augmentedreality-update-tethys-dynamo (npm) MAL-2025-185645 | Malicious | Not scored | 13 Nov, 2025 | npm augmentedreality-update-tethys-dynamo |
Malicious release: Malicious code in augmentedreality-vega-chai-cosmogenic (npm) MAL-2025-185646 | Malicious | Not scored | 13 Nov, 2025 | npm augmentedreality-vega-chai-cosmogenic |
Malicious release: Malicious code in augmentedreality-version-wavefunction-spawn (npm) MAL-2025-185647 | Malicious | Not scored | 13 Nov, 2025 | npm augmentedreality-version-wavefunction-spawn |
Malicious release: Malicious code in auriga-eslint-halley-fetch (npm) MAL-2025-185648 | Malicious | Not scored | 13 Nov, 2025 | npm auriga-eslint-halley-fetch |
Malicious release: Malicious code in auriga-inquirer-tailwindcss-winston (npm) MAL-2025-185649 | Malicious | Not scored | 13 Nov, 2025 | npm auriga-inquirer-tailwindcss-winston |
Malicious release: Malicious code in auriga-parcel-soap-nashira (npm) MAL-2025-185650 | Malicious | Not scored | 13 Nov, 2025 | npm auriga-parcel-soap-nashira |
Malicious release: Malicious code in auriga-postgres-fermion-filament (npm) MAL-2025-185651 | Malicious | Not scored | 13 Nov, 2025 | npm auriga-postgres-fermion-filament |
Malicious release: Malicious code in auriga-uglify-js-repository-thuban (npm) MAL-2025-185652 | Malicious | Not scored | 13 Nov, 2025 | npm auriga-uglify-js-repository-thuban |
Malicious release: Malicious code in aurora-exec-nebula-titan (npm) MAL-2025-185653 | Malicious | Not scored | 13 Nov, 2025 | npm aurora-exec-nebula-titan |
Malicious release: Malicious code in aurora-fusion-perseus-pm2 (npm) MAL-2025-185654 | Malicious | Not scored | 13 Nov, 2025 | npm aurora-fusion-perseus-pm2 |
Malicious release: Malicious code in aurora-nodemon-whitedwarf-indus (npm) MAL-2025-185655 | Malicious | Not scored | 13 Nov, 2025 | npm aurora-nodemon-whitedwarf-indus |
Malicious release: Malicious code in aurora-sync-buffer-canopus (npm) MAL-2025-185656 | Malicious | Not scored | 13 Nov, 2025 | npm aurora-sync-buffer-canopus |
Malicious release: Malicious code in aurora-transform-protoplanetarydisk-iota (npm) MAL-2025-185657 | Malicious | Not scored | 13 Nov, 2025 | npm aurora-transform-protoplanetarydisk-iota |
Malicious release: Malicious code in australis-geomorphology-adonis-babel (npm) MAL-2025-185658 | Malicious | Not scored | 13 Nov, 2025 | npm australis-geomorphology-adonis-babel |
Malicious release: Malicious code in australis-prosthetics-cygnus-xerxes (npm) MAL-2025-185659 | Malicious | Not scored | 13 Nov, 2025 | npm australis-prosthetics-cygnus-xerxes |
Malicious release: Malicious code in australis-wolf-archaeogenetics-virgo (npm) MAL-2025-185660 | Malicious | Not scored | 13 Nov, 2025 | npm australis-wolf-archaeogenetics-virgo |
Malicious release: Malicious code in auth-pm2-xo-google (npm) MAL-2025-185661 | Malicious | Not scored | 13 Nov, 2025 | npm auth-pm2-xo-google |
Malicious release: Malicious code in auth0-andromeda-heka-cross-env (npm) MAL-2025-185662 | Malicious | Not scored | 13 Nov, 2025 | npm auth0-andromeda-heka-cross-env |
Malicious release: Malicious code in auth0-astrometry-build-decoherence (npm) MAL-2025-185663 | Malicious | Not scored | 13 Nov, 2025 | npm auth0-astrometry-build-decoherence |
Malicious release: Malicious code in auth0-corvus-webdriver-mocha-chromedriver (npm) MAL-2025-185664 | Malicious | Not scored | 13 Nov, 2025 | npm auth0-corvus-webdriver-mocha-chromedriver |