Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in changelog-polaris-dotenv-safe-phoebe (npm) MAL-2025-186114 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-polaris-dotenv-safe-phoebe |
Malicious release: Malicious code in changelog-prompts-europa-blazar (npm) MAL-2025-186115 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-prompts-europa-blazar |
Malicious release: Malicious code in changelog-supernova-mantle-hermes (npm) MAL-2025-186116 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-supernova-mantle-hermes |
Malicious release: Malicious code in changelog-tachyon-writable-pipe (npm) MAL-2025-186117 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-tachyon-writable-pipe |
Malicious release: Malicious code in changelog-unuk-antares-restart (npm) MAL-2025-186118 | Malicious | Not scored | 13 Nov, 2025 | npm changelog-unuk-antares-restart |
Malicious release: Malicious code in char-alert-abstract-decrypt-test (npm) MAL-2025-186119 | Malicious | Not scored | 13 Nov, 2025 | npm char-alert-abstract-decrypt-test |
Malicious release: Malicious code in char-bundle-route-refactor-async (npm) MAL-2025-186120 | Malicious | Not scored | 13 Nov, 2025 | npm char-bundle-route-refactor-async |
Malicious release: Malicious code in char-cat-execute-eta-authenticate (npm) MAL-2025-186121 | Malicious | Not scored | 13 Nov, 2025 | npm char-cat-execute-eta-authenticate |
Malicious release: Malicious code in char-double-load-notify-gamma (npm) MAL-2025-186122 | Malicious | Not scored | 13 Nov, 2025 | npm char-double-load-notify-gamma |
Malicious release: Malicious code in char-hot-import-public-process (npm) MAL-2025-186123 | Malicious | Not scored | 13 Nov, 2025 | npm char-hot-import-public-process |
Malicious release: Malicious code in char-xml-xml-validate-validate (npm) MAL-2025-186124 | Malicious | Not scored | 13 Nov, 2025 | npm char-xml-xml-validate-validate |
Malicious release: Malicious code in chariklo-areology-changelog-arcturus (npm) MAL-2025-186125 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-areology-changelog-arcturus |
Malicious release: Malicious code in chariklo-babel-postgres-thuban (npm) MAL-2025-186126 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-babel-postgres-thuban |
Malicious release: Malicious code in chariklo-dysonswarm-yildun-adonis (npm) MAL-2025-186127 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-dysonswarm-yildun-adonis |
Malicious release: Malicious code in chariklo-library-public-local (npm) MAL-2025-186128 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-library-public-local |
Malicious release: Malicious code in chariklo-perseus-chalk-antares (npm) MAL-2025-186129 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-perseus-chalk-antares |
Malicious release: Malicious code in chariklo-sirius-relay-leda (npm) MAL-2025-186130 | Malicious | Not scored | 13 Nov, 2025 | npm chariklo-sirius-relay-leda |
Malicious release: Malicious code in charon-stream-fornax-dotenv (npm) MAL-2025-186131 | Malicious | Not scored | 13 Nov, 2025 | npm charon-stream-fornax-dotenv |
Malicious release: Malicious code in charon-transhumanism-zephyr-electron-builder (npm) MAL-2025-186132 | Malicious | Not scored | 13 Nov, 2025 | npm charon-transhumanism-zephyr-electron-builder |
Malicious release: Malicious code in chi-bad-deserialize-throw-static (npm) MAL-2025-186133 | Malicious | Not scored | 13 Nov, 2025 | npm chi-bad-deserialize-throw-static |
Malicious release: Malicious code in chi-cron-sudo-finally-visualize (npm) MAL-2025-186134 | Malicious | Not scored | 13 Nov, 2025 | npm chi-cron-sudo-finally-visualize |
Malicious release: Malicious code in chi-error-kappa-shell-error (npm) MAL-2025-186135 | Malicious | Not scored | 13 Nov, 2025 | npm chi-error-kappa-shell-error |
Malicious release: Malicious code in chi-iota-decompress-sed-emulate (npm) MAL-2025-186136 | Malicious | Not scored | 13 Nov, 2025 | npm chi-iota-decompress-sed-emulate |
Malicious release: Malicious code in chi-mu-socket-cold-small (npm) MAL-2025-186137 | Malicious | Not scored | 13 Nov, 2025 | npm chi-mu-socket-cold-small |
Malicious release: Malicious code in chi-omega-permission-analyze-warn (npm) MAL-2025-186138 | Malicious | Not scored | 13 Nov, 2025 | npm chi-omega-permission-analyze-warn |
Malicious release: Malicious code in chi-route-good-integer-grep (npm) MAL-2025-186139 | Malicious | Not scored | 13 Nov, 2025 | npm chi-route-good-integer-grep |
Malicious release: Malicious code in chi-short-export-assert-execute (npm) MAL-2025-186140 | Malicious | Not scored | 13 Nov, 2025 | npm chi-short-export-assert-execute |
Malicious release: Malicious code in child-process-blitz-spawn-wasat (npm) MAL-2025-186141 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-blitz-spawn-wasat |
Malicious release: Malicious code in child-process-charon-mui-on (npm) MAL-2025-186142 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-charon-mui-on |
Malicious release: Malicious code in child-process-concurrently-chakra-ui-node-sass (npm) MAL-2025-186143 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-concurrently-chakra-ui-node-sass |
Malicious release: Malicious code in child-process-eridanus-cypress-zephyr (npm) MAL-2025-186144 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-eridanus-cypress-zephyr |
Malicious release: Malicious code in child-process-loglevel-elektra-eleventy (npm) MAL-2025-186145 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-loglevel-elektra-eleventy |
Malicious release: Malicious code in child-process-stratigraphy-subduction-node-sass (npm) MAL-2025-186146 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-stratigraphy-subduction-node-sass |
Malicious release: Malicious code in child-process-xenon-avior-perseus (npm) MAL-2025-186147 | Malicious | Not scored | 13 Nov, 2025 | npm child-process-xenon-avior-perseus |
Malicious release: Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog (npm) MAL-2025-186148 | Malicious | Not scored | 13 Nov, 2025 | npm chromedriver-hyperion-isostasy-cz-conventional-changelog |
Malicious release: Malicious code in chromedriver-json-polaris-hyperion (npm) MAL-2025-186149 | Malicious | Not scored | 13 Nov, 2025 | npm chromedriver-json-polaris-hyperion |
Malicious release: Malicious code in chromedriver-jwt-paleoclimatology-archaeoastronomy (npm) MAL-2025-186150 | Malicious | Not scored | 13 Nov, 2025 | npm chromedriver-jwt-paleoclimatology-archaeoastronomy |
Malicious release: Malicious code in chromedriver-non-blocking-chariklo-registry (npm) MAL-2025-186151 | Malicious | Not scored | 13 Nov, 2025 | npm chromedriver-non-blocking-chariklo-registry |
Malicious release: Malicious code in chromedriver-spica-repository-epigenetics (npm) MAL-2025-186152 | Malicious | Not scored | 13 Nov, 2025 | npm chromedriver-spica-repository-epigenetics |
Malicious release: Malicious code in cladistics-charon-sagitta-protractor (npm) MAL-2025-186153 | Malicious | Not scored | 13 Nov, 2025 | npm cladistics-charon-sagitta-protractor |
Malicious release: Malicious code in cladistics-crust-blitz-delphinus (npm) MAL-2025-186154 | Malicious | Not scored | 13 Nov, 2025 | npm cladistics-crust-blitz-delphinus |
Malicious release: Malicious code in cladistics-geochemistry-vortex-panspermia (npm) MAL-2025-186155 | Malicious | Not scored | 13 Nov, 2025 | npm cladistics-geochemistry-vortex-panspermia |
Malicious release: Malicious code in cladistics-markdown-pdf-helmet-betelgeuse (npm) MAL-2025-186156 | Malicious | Not scored | 13 Nov, 2025 | npm cladistics-markdown-pdf-helmet-betelgeuse |
Malicious release: Malicious code in cladistics-virgo-transform-query (npm) MAL-2025-186157 | Malicious | Not scored | 13 Nov, 2025 | npm cladistics-virgo-transform-query |
Malicious release: Malicious code in class-debug-private-decrypt-slow (npm) MAL-2025-186158 | Malicious | Not scored | 13 Nov, 2025 | npm class-debug-private-decrypt-slow |
Malicious release: Malicious code in class-eta-lambda-hash-root (npm) MAL-2025-186159 | Malicious | Not scored | 13 Nov, 2025 | npm class-eta-lambda-hash-root |
Malicious release: Malicious code in class-kernel-lambda-void-try (npm) MAL-2025-186160 | Malicious | Not scored | 13 Nov, 2025 | npm class-kernel-lambda-void-try |
Malicious release: Malicious code in class-secure-function-transpile-authorize (npm) MAL-2025-186161 | Malicious | Not scored | 13 Nov, 2025 | npm class-secure-function-transpile-authorize |
Malicious release: Malicious code in cli-aldebaran-geodynamo-jabbah (npm) MAL-2025-186162 | Malicious | Not scored | 13 Nov, 2025 | npm cli-aldebaran-geodynamo-jabbah |
Malicious release: Malicious code in cli-cordelia-chalk-redgiant (npm) MAL-2025-186163 | Malicious | Not scored | 13 Nov, 2025 | npm cli-cordelia-chalk-redgiant |