Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cache-mensa-leda-build (npm) MAL-2025-185964 | Malicious | Not scored | 13 Nov, 2025 | npm cache-mensa-leda-build |
Malicious release: Malicious code in cache-meta-root-try-key (npm) MAL-2025-185965 | Malicious | Not scored | 13 Nov, 2025 | npm cache-meta-root-try-key |
Malicious release: Malicious code in cache-norma-protractor-superflare (npm) MAL-2025-185966 | Malicious | Not scored | 13 Nov, 2025 | npm cache-norma-protractor-superflare |
Malicious release: Malicious code in cache-phi-public-info-sed (npm) MAL-2025-185967 | Malicious | Not scored | 13 Nov, 2025 | npm cache-phi-public-info-sed |
Malicious release: Malicious code in cache-publish-decoherence-astroinformatics (npm) MAL-2025-185968 | Malicious | Not scored | 13 Nov, 2025 | npm cache-publish-decoherence-astroinformatics |
Malicious release: Malicious code in cache-simple-awk-sudo-class (npm) MAL-2025-185969 | Malicious | Not scored | 13 Nov, 2025 | npm cache-simple-awk-sudo-class |
Malicious release: Malicious code in cache-umbra-geoarchaeology-server (npm) MAL-2025-185970 | Malicious | Not scored | 13 Nov, 2025 | npm cache-umbra-geoarchaeology-server |
Malicious release: Malicious code in cache-xenos-regulus-rocket (npm) MAL-2025-185971 | Malicious | Not scored | 13 Nov, 2025 | npm cache-xenos-regulus-rocket |
Malicious release: Malicious code in cache-xml-stub-fire-nu (npm) MAL-2025-185972 | Malicious | Not scored | 13 Nov, 2025 | npm cache-xml-stub-fire-nu |
Malicious release: Malicious code in callback-dynamo-lacerta-chakra-ui (npm) MAL-2025-185973 | Malicious | Not scored | 13 Nov, 2025 | npm callback-dynamo-lacerta-chakra-ui |
Malicious release: Malicious code in callback-elara-hadron-jekyll (npm) MAL-2025-185974 | Malicious | Not scored | 13 Nov, 2025 | npm callback-elara-hadron-jekyll |
Malicious release: Malicious code in callback-fomalhaut-slidev-library (npm) MAL-2025-185975 | Malicious | Not scored | 13 Nov, 2025 | npm callback-fomalhaut-slidev-library |
Malicious release: Malicious code in callback-jekyll-public-nebula (npm) MAL-2025-185976 | Malicious | Not scored | 13 Nov, 2025 | npm callback-jekyll-public-nebula |
Malicious release: Malicious code in callback-kastra-wolf-abiogenesis (npm) MAL-2025-185977 | Malicious | Not scored | 13 Nov, 2025 | npm callback-kastra-wolf-abiogenesis |
Malicious release: Malicious code in callback-parallax-slides-metabolomics (npm) MAL-2025-185978 | Malicious | Not scored | 13 Nov, 2025 | npm callback-parallax-slides-metabolomics |
Malicious release: Malicious code in callback-saturnology-taphonomy-radiant (npm) MAL-2025-185979 | Malicious | Not scored | 13 Nov, 2025 | npm callback-saturnology-taphonomy-radiant |
Malicious release: Malicious code in callback-typeorm-venus-umbriel (npm) MAL-2025-185980 | Malicious | Not scored | 13 Nov, 2025 | npm callback-typeorm-venus-umbriel |
Malicious release: Malicious code in callback-upgrade-ophiuchus-achernar (npm) MAL-2025-185981 | Malicious | Not scored | 13 Nov, 2025 | npm callback-upgrade-ophiuchus-achernar |
Malicious release: Malicious code in callback-uranology-fork-rigel (npm) MAL-2025-185982 | Malicious | Not scored | 13 Nov, 2025 | npm callback-uranology-fork-rigel |
Malicious release: Malicious code in callback-xanthus-astrochemistry-quantum-computing (npm) MAL-2025-185983 | Malicious | Not scored | 13 Nov, 2025 | npm callback-xanthus-astrochemistry-quantum-computing |
Malicious release: Malicious code in callback-zephyr-semantic-ui-carpo (npm) MAL-2025-185984 | Malicious | Not scored | 13 Nov, 2025 | npm callback-zephyr-semantic-ui-carpo |
Malicious release: Malicious code in callisto-cors-ini-puppeteer (npm) MAL-2025-185985 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-cors-ini-puppeteer |
Malicious release: Malicious code in callisto-enif-cryonics-dotenv-parse-variables (npm) MAL-2025-185986 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-enif-cryonics-dotenv-parse-variables |
Malicious release: Malicious code in callisto-europa-buffer-nodemon (npm) MAL-2025-185987 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-europa-buffer-nodemon |
Malicious release: Malicious code in callisto-europa-relay-bootes (npm) MAL-2025-185988 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-europa-relay-bootes |
Malicious release: Malicious code in callisto-hyperion-dactyl-equinox (npm) MAL-2025-185989 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-hyperion-dactyl-equinox |
Malicious release: Malicious code in callisto-hyperion-norma-firebase (npm) MAL-2025-185990 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-hyperion-norma-firebase |
Malicious release: Malicious code in callisto-meissa-centaurus-sync (npm) MAL-2025-185991 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-meissa-centaurus-sync |
Malicious release: Malicious code in callisto-module-module-antares (npm) MAL-2025-185992 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-module-module-antares |
Malicious release: Malicious code in callisto-proxima-command-loglevel (npm) MAL-2025-185993 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-proxima-command-loglevel |
Malicious release: Malicious code in callisto-sirius-farout-multiverse (npm) MAL-2025-185994 | Malicious | Not scored | 13 Nov, 2025 | npm callisto-sirius-farout-multiverse |
Malicious release: Malicious code in canopus-odin-scorpius-css-minimizer-webpack-plugin (npm) MAL-2025-185995 | Malicious | Not scored | 13 Nov, 2025 | npm canopus-odin-scorpius-css-minimizer-webpack-plugin |
Malicious release: Malicious code in capella-biotechnology-meteor-start (npm) MAL-2025-185996 | Malicious | Not scored | 13 Nov, 2025 | npm capella-biotechnology-meteor-start |
Malicious release: Malicious code in capella-cypress-stream-supernova (npm) MAL-2025-185997 | Malicious | Not scored | 13 Nov, 2025 | npm capella-cypress-stream-supernova |
Malicious release: Malicious code in capella-indus-config-relay (npm) MAL-2025-185998 | Malicious | Not scored | 13 Nov, 2025 | npm capella-indus-config-relay |
Malicious release: Malicious code in capella-non-blocking-avior-jabbah (npm) MAL-2025-185999 | Malicious | Not scored | 13 Nov, 2025 | npm capella-non-blocking-avior-jabbah |
Malicious release: Malicious code in capella-proxima-geomorphology-sirius (npm) MAL-2025-186000 | Malicious | Not scored | 13 Nov, 2025 | npm capella-proxima-geomorphology-sirius |
Malicious release: Malicious code in capella-tethys-lynx-antimatter (npm) MAL-2025-186001 | Malicious | Not scored | 13 Nov, 2025 | npm capella-tethys-lynx-antimatter |
Malicious release: Malicious code in capella-yaml-innercore-hermes (npm) MAL-2025-186002 | Malicious | Not scored | 13 Nov, 2025 | npm capella-yaml-innercore-hermes |
Malicious release: Malicious code in carina-solis-ultra-rimraf (npm) MAL-2025-186003 | Malicious | Not scored | 13 Nov, 2025 | npm carina-solis-ultra-rimraf |
Malicious release: Malicious code in carina-telesto-taurus-cladistics (npm) MAL-2025-186004 | Malicious | Not scored | 13 Nov, 2025 | npm carina-telesto-taurus-cladistics |
Malicious release: Malicious code in carpo-aurora-pegasus-sqlite (npm) MAL-2025-186005 | Malicious | Not scored | 13 Nov, 2025 | npm carpo-aurora-pegasus-sqlite |
Malicious release: Malicious code in carpo-hermes-firebase-nightmare (npm) MAL-2025-186006 | Malicious | Not scored | 13 Nov, 2025 | npm carpo-hermes-firebase-nightmare |
Malicious release: Malicious code in carpo-lynx-sirius-sirius (npm) MAL-2025-186007 | Malicious | Not scored | 13 Nov, 2025 | npm carpo-lynx-sirius-sirius |
Malicious release: Malicious code in carpo-mdx-comet-hyperion (npm) MAL-2025-186008 | Malicious | Not scored | 13 Nov, 2025 | npm carpo-mdx-comet-hyperion |
Malicious release: Malicious code in carpo-release-it-oberon-halley (npm) MAL-2025-186009 | Malicious | Not scored | 13 Nov, 2025 | npm carpo-release-it-oberon-halley |
Malicious release: Malicious code in cassini-frontend-umbriel-ophiuchus (npm) MAL-2025-186010 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-frontend-umbriel-ophiuchus |
Malicious release: Malicious code in cassini-halley-jekyll-less (npm) MAL-2025-186011 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-halley-jekyll-less |
Malicious release: Malicious code in cassini-hawkingradiation-rocket-sedna (npm) MAL-2025-186012 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-hawkingradiation-rocket-sedna |
Malicious release: Malicious code in cassini-html-webpack-plugin-loglevel-jest (npm) MAL-2025-186013 | Malicious | Not scored | 13 Nov, 2025 | npm cassini-html-webpack-plugin-loglevel-jest |