Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in blueshift-lynx-dotenv-safe-morgan (npm) MAL-2025-185864 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-lynx-dotenv-safe-morgan |
Malicious release: Malicious code in blueshift-perturbation-centauri-paleoceanography (npm) MAL-2025-185865 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-perturbation-centauri-paleoceanography |
Malicious release: Malicious code in blueshift-publish-carina-nconf (npm) MAL-2025-185866 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-publish-carina-nconf |
Malicious release: Malicious code in blueshift-standard-altair-higgs (npm) MAL-2025-185867 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-standard-altair-higgs |
Malicious release: Malicious code in blueshift-toml-bellatrix-blueshift (npm) MAL-2025-185868 | Malicious | Not scored | 13 Nov, 2025 | npm blueshift-toml-bellatrix-blueshift |
Malicious release: Malicious code in book-boolean-runtime-grep-root (npm) MAL-2025-185869 | Malicious | Not scored | 13 Nov, 2025 | npm book-boolean-runtime-grep-root |
Malicious release: Malicious code in book-compile-try-fork-kernel (npm) MAL-2025-185870 | Malicious | Not scored | 13 Nov, 2025 | npm book-compile-try-fork-kernel |
Malicious release: Malicious code in book-data-short-index-object (npm) MAL-2025-185871 | Malicious | Not scored | 13 Nov, 2025 | npm book-data-short-index-object |
Malicious release: Malicious code in book-earth-runtime-delta-chi (npm) MAL-2025-185872 | Malicious | Not scored | 13 Nov, 2025 | npm book-earth-runtime-delta-chi |
Malicious release: Malicious code in book-good-old-sun-test (npm) MAL-2025-185873 | Malicious | Not scored | 13 Nov, 2025 | npm book-good-old-sun-test |
Malicious release: Malicious code in book-sanitize-cat-cold-class (npm) MAL-2025-185874 | Malicious | Not scored | 13 Nov, 2025 | npm book-sanitize-cat-cold-class |
Malicious release: Malicious code in book-web-deploy-object-byte (npm) MAL-2025-185875 | Malicious | Not scored | 13 Nov, 2025 | npm book-web-deploy-object-byte |
Malicious release: Malicious code in boolean-balance-delta-visualize-resolve (npm) MAL-2025-185876 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-balance-delta-visualize-resolve |
Malicious release: Malicious code in boolean-double-benchmark-star-node (npm) MAL-2025-185877 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-double-benchmark-star-node |
Malicious release: Malicious code in boolean-fork-uglify-dog-sanitize (npm) MAL-2025-185878 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-fork-uglify-dog-sanitize |
Malicious release: Malicious code in boolean-reject-balance-sun-slow (npm) MAL-2025-185879 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-reject-balance-sun-slow |
Malicious release: Malicious code in boolean-xml-encrypt-hash-enum (npm) MAL-2025-185880 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-xml-encrypt-hash-enum |
Malicious release: Malicious code in boolean-zeta-fire-omega-lambda (npm) MAL-2025-185881 | Malicious | Not scored | 13 Nov, 2025 | npm boolean-zeta-fire-omega-lambda |
Malicious release: Malicious code in bootes-config-docusaurus-ultra (npm) MAL-2025-185882 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-config-docusaurus-ultra |
Malicious release: Malicious code in bootes-global-luna-galaxy (npm) MAL-2025-185883 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-global-luna-galaxy |
Malicious release: Malicious code in bootes-reveal-md-cache-antares (npm) MAL-2025-185884 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-reveal-md-cache-antares |
Malicious release: Malicious code in bootes-terser-local-sqlite (npm) MAL-2025-185885 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-terser-local-sqlite |
Malicious release: Malicious code in bootes-transform-nuxtjs-proxima (npm) MAL-2025-185886 | Malicious | Not scored | 13 Nov, 2025 | npm bootes-transform-nuxtjs-proxima |
Malicious release: Malicious code in bootstrap-cluster-fornax-link (npm) MAL-2025-185887 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-cluster-fornax-link |
Malicious release: Malicious code in bootstrap-forever-uranology-colors (npm) MAL-2025-185888 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-forever-uranology-colors |
Malicious release: Malicious code in bootstrap-fusion-loop-restart (npm) MAL-2025-185889 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-fusion-loop-restart |
Malicious release: Malicious code in bootstrap-futurology-bootstrap-html-webpack-plugin (npm) MAL-2025-185890 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-futurology-bootstrap-html-webpack-plugin |
Malicious release: Malicious code in bootstrap-kastra-event-scripts (npm) MAL-2025-185891 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-kastra-event-scripts |
Malicious release: Malicious code in bootstrap-semantic-release-pulsar-koa (npm) MAL-2025-185892 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-semantic-release-pulsar-koa |
Malicious release: Malicious code in bootstrap-solis-bulma-zooarchaeology (npm) MAL-2025-185893 | Malicious | Not scored | 13 Nov, 2025 | npm bootstrap-solis-bulma-zooarchaeology |
Malicious release: Malicious code in borealis-dagda-impulse-pm2 (npm) MAL-2025-185894 | Malicious | Not scored | 13 Nov, 2025 | npm borealis-dagda-impulse-pm2 |
Malicious release: Malicious code in borealis-hercules-ora-lyra (npm) MAL-2025-185895 | Malicious | Not scored | 13 Nov, 2025 | npm borealis-hercules-ora-lyra |
Malicious release: Malicious code in borealis-hermes-bellatrix-geochronology (npm) MAL-2025-185896 | Malicious | Not scored | 13 Nov, 2025 | npm borealis-hermes-bellatrix-geochronology |
Malicious release: Malicious code in borealis-promise-spinner-ora (npm) MAL-2025-185897 | Malicious | Not scored | 13 Nov, 2025 | npm borealis-promise-spinner-ora |
Malicious release: Malicious code in borealis-rigel-string-exoplanetology (npm) MAL-2025-185898 | Malicious | Not scored | 13 Nov, 2025 | npm borealis-rigel-string-exoplanetology |
Malicious release: Malicious code in boson-apex-parcel-cybernetics (npm) MAL-2025-185899 | Malicious | Not scored | 13 Nov, 2025 | npm boson-apex-parcel-cybernetics |
Malicious release: Malicious code in boson-build-tachyon-solis (npm) MAL-2025-185900 | Malicious | Not scored | 13 Nov, 2025 | npm boson-build-tachyon-solis |
Malicious release: Malicious code in boson-forever-leda-pegasus (npm) MAL-2025-185901 | Malicious | Not scored | 13 Nov, 2025 | npm boson-forever-leda-pegasus |
Malicious release: Malicious code in boson-fornax-redshift-andromeda (npm) MAL-2025-185902 | Malicious | Not scored | 13 Nov, 2025 | npm boson-fornax-redshift-andromeda |
Malicious release: Malicious code in boson-hugo-cosmology-mineralogy (npm) MAL-2025-185903 | Malicious | Not scored | 13 Nov, 2025 | npm boson-hugo-cosmology-mineralogy |
Malicious release: Malicious code in boson-module-subscription-scripts (npm) MAL-2025-185904 | Malicious | Not scored | 13 Nov, 2025 | npm boson-module-subscription-scripts |
Malicious release: Malicious code in boson-style-loader-less-loader-superflare (npm) MAL-2025-185905 | Malicious | Not scored | 13 Nov, 2025 | npm boson-style-loader-less-loader-superflare |
Malicious release: Malicious code in brane-halley-solarnebula-stratosphere (npm) MAL-2025-185906 | Malicious | Not scored | 13 Nov, 2025 | npm brane-halley-solarnebula-stratosphere |
Malicious release: Malicious code in brane-kardashevscale-coronalmassejection-izar (npm) MAL-2025-185907 | Malicious | Not scored | 13 Nov, 2025 | npm brane-kardashevscale-coronalmassejection-izar |
Malicious release: Malicious code in brane-mocha-elektra-farout (npm) MAL-2025-185908 | Malicious | Not scored | 13 Nov, 2025 | npm brane-mocha-elektra-farout |
Malicious release: Malicious code in brane-nashira-cluster-spawn (npm) MAL-2025-185909 | Malicious | Not scored | 13 Nov, 2025 | npm brane-nashira-cluster-spawn |
Malicious release: Malicious code in brane-pm2-isostasy-jekyll (npm) MAL-2025-185910 | Malicious | Not scored | 13 Nov, 2025 | npm brane-pm2-isostasy-jekyll |
Malicious release: Malicious code in brane-venus-betelgeuse-altair (npm) MAL-2025-185911 | Malicious | Not scored | 13 Nov, 2025 | npm brane-venus-betelgeuse-altair |
Malicious release: Malicious code in browserify-astrometry-stratigraphy-foundation (npm) MAL-2025-185912 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-astrometry-stratigraphy-foundation |
Malicious release: Malicious code in browserify-cosmiconfig-testcafe-await (npm) MAL-2025-185913 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-cosmiconfig-testcafe-await |