Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in browserify-eslint-plugin-heka-mui (npm) MAL-2025-185914 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-eslint-plugin-heka-mui |
Malicious release: Malicious code in browserify-izar-archaeogenetics-darkmatter (npm) MAL-2025-185915 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-izar-archaeogenetics-darkmatter |
Malicious release: Malicious code in browserify-nodemon-proxima-markdown (npm) MAL-2025-185916 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-nodemon-proxima-markdown |
Malicious release: Malicious code in browserify-sedna-apollo-airbnb (npm) MAL-2025-185917 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-sedna-apollo-airbnb |
Malicious release: Malicious code in browserify-seismology-vega-quito (npm) MAL-2025-185918 | Malicious | Not scored | 13 Nov, 2025 | npm browserify-seismology-vega-quito |
Malicious release: Malicious code in buffer-aldebaran-norma-test (npm) MAL-2025-185919 | Malicious | Not scored | 13 Nov, 2025 | npm buffer-aldebaran-norma-test |
Malicious release: Malicious code in buffer-apex-paleontology-cli (npm) MAL-2025-185920 | Malicious | Not scored | 13 Nov, 2025 | npm buffer-apex-paleontology-cli |
Malicious release: Malicious code in buffer-css-loader-draco-sirius (npm) MAL-2025-185921 | Malicious | Not scored | 13 Nov, 2025 | npm buffer-css-loader-draco-sirius |
Malicious release: Malicious code in buffer-mocha-astrophysics-technosignature (npm) MAL-2025-185922 | Malicious | Not scored | 13 Nov, 2025 | npm buffer-mocha-astrophysics-technosignature |
Malicious release: Malicious code in buffer-package-bionics-graphql (npm) MAL-2025-185923 | Malicious | Not scored | 13 Nov, 2025 | npm buffer-package-bionics-graphql |
Malicious release: Malicious code in build-commitlint-config-angular-lithosphere-string (npm) MAL-2025-185924 | Malicious | Not scored | 13 Nov, 2025 | npm build-commitlint-config-angular-lithosphere-string |
Malicious release: Malicious code in build-eleventy-deneb-gemini (npm) MAL-2025-185925 | Malicious | Not scored | 13 Nov, 2025 | npm build-eleventy-deneb-gemini |
Malicious release: Malicious code in build-enceladus-supernova-joviology (npm) MAL-2025-185926 | Malicious | Not scored | 13 Nov, 2025 | npm build-enceladus-supernova-joviology |
Malicious release: Malicious code in build-farout-cz-conventional-changelog-rocket (npm) MAL-2025-185927 | Malicious | Not scored | 13 Nov, 2025 | npm build-farout-cz-conventional-changelog-rocket |
Malicious release: Malicious code in build-geoarchaeology-mutation-library (npm) MAL-2025-185928 | Malicious | Not scored | 13 Nov, 2025 | npm build-geoarchaeology-mutation-library |
Malicious release: Malicious code in build-hapi-registry-quark (npm) MAL-2025-185929 | Malicious | Not scored | 13 Nov, 2025 | npm build-hapi-registry-quark |
Malicious release: Malicious code in build-neptunology-neptunology-adonis (npm) MAL-2025-185930 | Malicious | Not scored | 13 Nov, 2025 | npm build-neptunology-neptunology-adonis |
Malicious release: Malicious code in build-perseus-repository-asteroid (npm) MAL-2025-185931 | Malicious | Not scored | 13 Nov, 2025 | npm build-perseus-repository-asteroid |
Malicious release: Malicious code in bulma-equinox-build-nova (npm) MAL-2025-185932 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-equinox-build-nova |
Malicious release: Malicious code in bulma-interferometry-mesosphere-jabbah (npm) MAL-2025-185933 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-interferometry-mesosphere-jabbah |
Malicious release: Malicious code in bulma-promise-redgiant-xenobiology (npm) MAL-2025-185934 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-promise-redgiant-xenobiology |
Malicious release: Malicious code in bulma-rate-limiter-nodemon-aurora (npm) MAL-2025-185935 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-rate-limiter-nodemon-aurora |
Malicious release: Malicious code in bulma-regulus-mesosphere-resolvers (npm) MAL-2025-185936 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-regulus-mesosphere-resolvers |
Malicious release: Malicious code in bulma-titan-axios-ariel (npm) MAL-2025-185937 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-titan-axios-ariel |
Malicious release: Malicious code in bulma-yonder-acamar-ichnology (npm) MAL-2025-185938 | Malicious | Not scored | 13 Nov, 2025 | npm bulma-yonder-acamar-ichnology |
Malicious release: Malicious code in bundle-alert-runtime-private-bundle (npm) MAL-2025-185939 | Malicious | Not scored | 13 Nov, 2025 | npm bundle-alert-runtime-private-bundle |
Malicious release: Malicious code in bundle-static-pipe-mu-float (npm) MAL-2025-185940 | Malicious | Not scored | 13 Nov, 2025 | npm bundle-static-pipe-mu-float |
Malicious release: Malicious code in bundle-theta-virtualize-sanitize-sigma (npm) MAL-2025-185941 | Malicious | Not scored | 13 Nov, 2025 | npm bundle-theta-virtualize-sanitize-sigma |
Malicious release: Malicious code in bunyan-areology-glaciology-charon (npm) MAL-2025-185942 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-areology-glaciology-charon |
Malicious release: Malicious code in bunyan-callback-pipe-mysql (npm) MAL-2025-185943 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-callback-pipe-mysql |
Malicious release: Malicious code in bunyan-carina-adonis-mysql (npm) MAL-2025-185944 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-carina-adonis-mysql |
Malicious release: Malicious code in bunyan-cosmicray-membrane-terser (npm) MAL-2025-185945 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-cosmicray-membrane-terser |
Malicious release: Malicious code in bunyan-jasmine-winston-geoarchaeology (npm) MAL-2025-185946 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-jasmine-winston-geoarchaeology |
Malicious release: Malicious code in bunyan-pegasus-primatology-quantum-computing (npm) MAL-2025-185947 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-pegasus-primatology-quantum-computing |
Malicious release: Malicious code in bunyan-radioastronomy-interstellarmedium-outercore (npm) MAL-2025-185948 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-radioastronomy-interstellarmedium-outercore |
Malicious release: Malicious code in bunyan-redis-capella-html-webpack-plugin (npm) MAL-2025-185949 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-redis-capella-html-webpack-plugin |
Malicious release: Malicious code in bunyan-release-it-carpo-request (npm) MAL-2025-185950 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-release-it-carpo-request |
Malicious release: Malicious code in bunyan-resonance-mensa-concurrently (npm) MAL-2025-185951 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-resonance-mensa-concurrently |
Malicious release: Malicious code in bunyan-spectron-webdriver-less-magellan (npm) MAL-2025-185952 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-spectron-webdriver-less-magellan |
Malicious release: Malicious code in bunyan-titan-sadr-loop (npm) MAL-2025-185953 | Malicious | Not scored | 13 Nov, 2025 | npm bunyan-titan-sadr-loop |
Malicious release: Malicious code in byte-assert-finally-hot-sanitize (npm) MAL-2025-185954 | Malicious | Not scored | 13 Nov, 2025 | npm byte-assert-finally-hot-sanitize |
Malicious release: Malicious code in byte-decompress-cold-deploy-wind (npm) MAL-2025-185955 | Malicious | Not scored | 13 Nov, 2025 | npm byte-decompress-cold-deploy-wind |
Malicious release: Malicious code in byte-log-float-cold-analyze (npm) MAL-2025-185956 | Malicious | Not scored | 13 Nov, 2025 | npm byte-log-float-cold-analyze |
Malicious release: Malicious code in byte-nu-monitor-module-static (npm) MAL-2025-185957 | Malicious | Not scored | 13 Nov, 2025 | npm byte-nu-monitor-module-static |
Malicious release: Malicious code in byte-orchestrate-wind-water-private (npm) MAL-2025-185958 | Malicious | Not scored | 13 Nov, 2025 | npm byte-orchestrate-wind-water-private |
Malicious release: Malicious code in byte-root-test-kappa-sudo (npm) MAL-2025-185959 | Malicious | Not scored | 13 Nov, 2025 | npm byte-root-test-kappa-sudo |
Malicious release: Malicious code in byte-runtime-easy-promise-transpile (npm) MAL-2025-185960 | Malicious | Not scored | 13 Nov, 2025 | npm byte-runtime-easy-promise-transpile |
Malicious release: Malicious code in cache-cat-index-async-small (npm) MAL-2025-185961 | Malicious | Not scored | 13 Nov, 2025 | npm cache-cat-index-async-small |
Malicious release: Malicious code in cache-hercules-xerxes-commitizen (npm) MAL-2025-185962 | Malicious | Not scored | 13 Nov, 2025 | npm cache-hercules-xerxes-commitizen |
Malicious release: Malicious code in cache-less-venus-supercluster (npm) MAL-2025-185963 | Malicious | Not scored | 13 Nov, 2025 | npm cache-less-venus-supercluster |