Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cosmos-volcanology-cassini-nova (npm) MAL-2025-186364 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-volcanology-cassini-nova |
Malicious release: Malicious code in cosmos-yonder-grunt-nashira (npm) MAL-2025-186365 | Malicious | Not scored | 13 Nov, 2025 | npm cosmos-yonder-grunt-nashira |
Malicious release: Malicious code in cressida-cache-iota-antares (npm) MAL-2025-186366 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-cache-iota-antares |
Malicious release: Malicious code in cressida-cybernetics-rollup-plugin-node-sass (npm) MAL-2025-186367 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-cybernetics-rollup-plugin-node-sass |
Malicious release: Malicious code in cressida-indus-epimetheus-borealis (npm) MAL-2025-186368 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-indus-epimetheus-borealis |
Malicious release: Malicious code in cressida-jwt-loglevel-fetch (npm) MAL-2025-186369 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-jwt-loglevel-fetch |
Malicious release: Malicious code in cressida-prettier-plugin-markdown-pulsar-stream (npm) MAL-2025-186370 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-prettier-plugin-markdown-pulsar-stream |
Malicious release: Malicious code in cressida-vortex-lint-staged-blueshift (npm) MAL-2025-186371 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-vortex-lint-staged-blueshift |
Malicious release: Malicious code in cressida-yakutsk-zephyr-rollup (npm) MAL-2025-186372 | Malicious | Not scored | 13 Nov, 2025 | npm cressida-yakutsk-zephyr-rollup |
Malicious release: Malicious code in cron-kappa-bash-serialize-beta (npm) MAL-2025-186373 | Malicious | Not scored | 13 Nov, 2025 | npm cron-kappa-bash-serialize-beta |
Malicious release: Malicious code in cron-optimize-thread-cat-compile (npm) MAL-2025-186374 | Malicious | Not scored | 13 Nov, 2025 | npm cron-optimize-thread-cat-compile |
Malicious release: Malicious code in cron-rho-analyze-socket-air (npm) MAL-2025-186375 | Malicious | Not scored | 13 Nov, 2025 | npm cron-rho-analyze-socket-air |
Malicious release: Malicious code in cron-tree-query-unix-report (npm) MAL-2025-186376 | Malicious | Not scored | 13 Nov, 2025 | npm cron-tree-query-unix-report |
Malicious release: Malicious code in cross-env-atlas-non-blocking-eslint (npm) MAL-2025-186377 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-atlas-non-blocking-eslint |
Malicious release: Malicious code in cross-env-atlas-thuban-enif (npm) MAL-2025-186378 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-atlas-thuban-enif |
Malicious release: Malicious code in cross-env-cross-env-photon-superposition (npm) MAL-2025-186379 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-cross-env-photon-superposition |
Malicious release: Malicious code in cross-env-cybernetics-juno-iota (npm) MAL-2025-186380 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-cybernetics-juno-iota |
Malicious release: Malicious code in cross-env-dorado-eslint-config-zephyr (npm) MAL-2025-186381 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-dorado-eslint-config-zephyr |
Malicious release: Malicious code in cross-env-flare-hyperion-meissa (npm) MAL-2025-186382 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-flare-hyperion-meissa |
Malicious release: Malicious code in cross-env-geochemistry-global-juno (npm) MAL-2025-186383 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-geochemistry-global-juno |
Malicious release: Malicious code in cross-env-native-centaurus-dynamo (npm) MAL-2025-186384 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-native-centaurus-dynamo |
Malicious release: Malicious code in cross-env-package-rimraf-antares (npm) MAL-2025-186385 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-package-rimraf-antares |
Malicious release: Malicious code in cross-env-singularity-europa-paleobotany (npm) MAL-2025-186386 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-singularity-europa-paleobotany |
Malicious release: Malicious code in cross-env-vega-native-blazar (npm) MAL-2025-186387 | Malicious | Not scored | 13 Nov, 2025 | npm cross-env-vega-native-blazar |
Malicious release: Malicious code in crust-mui-development-norma (npm) MAL-2025-186388 | Malicious | Not scored | 13 Nov, 2025 | npm crust-mui-development-norma |
Malicious release: Malicious code in crust-proxima-typeorm-duplex (npm) MAL-2025-186389 | Malicious | Not scored | 13 Nov, 2025 | npm crust-proxima-typeorm-duplex |
Malicious release: Malicious code in crust-thuban-archaeogenetics-callback (npm) MAL-2025-186390 | Malicious | Not scored | 13 Nov, 2025 | npm crust-thuban-archaeogenetics-callback |
Malicious release: Malicious code in cryonics-blazar-nightwatch-inflation (npm) MAL-2025-186391 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-blazar-nightwatch-inflation |
Malicious release: Malicious code in cryonics-convict-tectonophysics-interstellarmedium (npm) MAL-2025-186392 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-convict-tectonophysics-interstellarmedium |
Malicious release: Malicious code in cryonics-cypress-stream-lithosphere (npm) MAL-2025-186393 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-cypress-stream-lithosphere |
Malicious release: Malicious code in cryonics-jest-tachyon-hydra (npm) MAL-2025-186394 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-jest-tachyon-hydra |
Malicious release: Malicious code in cryonics-magellan-bionics-tardigrade (npm) MAL-2025-186395 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-magellan-bionics-tardigrade |
Malicious release: Malicious code in cryonics-meteor-spawn-halley (npm) MAL-2025-186396 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-meteor-spawn-halley |
Malicious release: Malicious code in cryonics-neutronstar-webdriver-mocha-whitedwarf (npm) MAL-2025-186397 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-neutronstar-webdriver-mocha-whitedwarf |
Malicious release: Malicious code in cryonics-publish-dactyl-pyxis (npm) MAL-2025-186398 | Malicious | Not scored | 13 Nov, 2025 | npm cryonics-publish-dactyl-pyxis |
Malicious release: Malicious code in cryovolcano-grus-ini-proxima (npm) MAL-2025-186399 | Malicious | Not scored | 13 Nov, 2025 | npm cryovolcano-grus-ini-proxima |
Malicious release: Malicious code in cryovolcano-miranda-blueshift-rimraf (npm) MAL-2025-186400 | Malicious | Not scored | 13 Nov, 2025 | npm cryovolcano-miranda-blueshift-rimraf |
Malicious release: Malicious code in cryovolcano-transhumanism-scripts-janus (npm) MAL-2025-186401 | Malicious | Not scored | 13 Nov, 2025 | npm cryovolcano-transhumanism-scripts-janus |
Malicious release: Malicious code in cryptography-biohacking-xml-graphql (npm) MAL-2025-186402 | Malicious | Not scored | 13 Nov, 2025 | npm cryptography-biohacking-xml-graphql |
Malicious release: Malicious code in cryptography-cross-env-google-yildun (npm) MAL-2025-186403 | Malicious | Not scored | 13 Nov, 2025 | npm cryptography-cross-env-google-yildun |
Malicious release: Malicious code in cryptography-epimetheus-prettier-plugin-markdown-run-script (npm) MAL-2025-186404 | Malicious | Not scored | 13 Nov, 2025 | npm cryptography-epimetheus-prettier-plugin-markdown-run-script |
Malicious release: Malicious code in cryptography-webdriver-manager-schema-test (npm) MAL-2025-186405 | Malicious | Not scored | 13 Nov, 2025 | npm cryptography-webdriver-manager-schema-test |
Malicious release: Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm) MAL-2025-186406 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-bootes-html-webpack-plugin-ichnology |
Malicious release: Malicious code in csrf-callisto-hapi-nextjs (npm) MAL-2025-186407 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-callisto-hapi-nextjs |
Malicious release: Malicious code in csrf-carina-technocracy-areology (npm) MAL-2025-186408 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-carina-technocracy-areology |
Malicious release: Malicious code in csrf-eslint-config-futurology-sass-loader (npm) MAL-2025-186409 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-eslint-config-futurology-sass-loader |
Malicious release: Malicious code in csrf-farout-backend-fomalhaut (npm) MAL-2025-186410 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-farout-backend-fomalhaut |
Malicious release: Malicious code in csrf-mutation-oauth-convict (npm) MAL-2025-186411 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-mutation-oauth-convict |
Malicious release: Malicious code in csrf-relay-miranda-halley (npm) MAL-2025-186412 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-relay-miranda-halley |
Malicious release: Malicious code in csrf-thermochronology-oscillation-janus (npm) MAL-2025-186413 | Malicious | Not scored | 13 Nov, 2025 | npm csrf-thermochronology-oscillation-janus |