Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in css-loader-castor-supervisor-elara (npm) MAL-2025-186414 | Malicious | Not scored | 13 Nov, 2025 | npm css-loader-castor-supervisor-elara |
Malicious release: Malicious code in css-loader-iota-celeste-electron (npm) MAL-2025-186415 | Malicious | Not scored | 13 Nov, 2025 | npm css-loader-iota-celeste-electron |
Malicious release: Malicious code in css-loader-mui-wasat-standard (npm) MAL-2025-186416 | Malicious | Not scored | 13 Nov, 2025 | npm css-loader-mui-wasat-standard |
Malicious release: Malicious code in css-loader-rehype-toml-version (npm) MAL-2025-186417 | Malicious | Not scored | 13 Nov, 2025 | npm css-loader-rehype-toml-version |
Malicious release: Malicious code in css-minimizer-webpack-plugin-brane-saturnology-quito (npm) MAL-2025-186418 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-brane-saturnology-quito |
Malicious release: Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova (npm) MAL-2025-186419 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-firebase-corvus-supernova |
Malicious release: Malicious code in css-minimizer-webpack-plugin-framework-nextjs-upgrade (npm) MAL-2025-186420 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-framework-nextjs-upgrade |
Malicious release: Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo (npm) MAL-2025-186421 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-hermes-spectron-pavo |
Malicious release: Malicious code in css-minimizer-webpack-plugin-hugo-gemini-command (npm) MAL-2025-186422 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-hugo-gemini-command |
Malicious release: Malicious code in css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint (npm) MAL-2025-186423 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint |
Malicious release: Malicious code in css-minimizer-webpack-plugin-superagent-npm-private (npm) MAL-2025-186424 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-superagent-npm-private |
Malicious release: Malicious code in css-minimizer-webpack-plugin-virtualreality-ignite-node-sass (npm) MAL-2025-186425 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-virtualreality-ignite-node-sass |
Malicious release: Malicious code in css-minimizer-webpack-plugin-vuetify-ichnology-redshift (npm) MAL-2025-186426 | Malicious | Not scored | 13 Nov, 2025 | npm css-minimizer-webpack-plugin-vuetify-ichnology-redshift |
Malicious release: Malicious code in csv-aldebaran-biohacking-cluster (npm) MAL-2025-186427 | Malicious | Not scored | 13 Nov, 2025 | npm csv-aldebaran-biohacking-cluster |
Malicious release: Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin (npm) MAL-2025-186428 | Malicious | Not scored | 13 Nov, 2025 | npm csv-dysonswarm-aether-optimize-css-assets-webpack-plugin |
Malicious release: Malicious code in csv-envconfig-achernar-stratigraphy (npm) MAL-2025-186429 | Malicious | Not scored | 13 Nov, 2025 | npm csv-envconfig-achernar-stratigraphy |
Malicious release: Malicious code in csv-helmet-dione-canopus (npm) MAL-2025-186430 | Malicious | Not scored | 13 Nov, 2025 | npm csv-helmet-dione-canopus |
Malicious release: Malicious code in csv-mensa-hadron-sagitta (npm) MAL-2025-186431 | Malicious | Not scored | 13 Nov, 2025 | npm csv-mensa-hadron-sagitta |
Malicious release: Malicious code in csv-mongodb-rehype-less-loader (npm) MAL-2025-186432 | Malicious | Not scored | 13 Nov, 2025 | npm csv-mongodb-rehype-less-loader |
Malicious release: Malicious code in csv-puppeteer-phoenix-event (npm) MAL-2025-186433 | Malicious | Not scored | 13 Nov, 2025 | npm csv-puppeteer-phoenix-event |
Malicious release: Malicious code in csv-steganography-sadr-buffer (npm) MAL-2025-186434 | Malicious | Not scored | 13 Nov, 2025 | npm csv-steganography-sadr-buffer |
Malicious release: Malicious code in cybernetics-concurrently-testcafe-foundation (npm) MAL-2025-186435 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-concurrently-testcafe-foundation |
Malicious release: Malicious code in cybernetics-configstore-apex-luna (npm) MAL-2025-186436 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-configstore-apex-luna |
Malicious release: Malicious code in cybernetics-duplex-oscillation-publish (npm) MAL-2025-186437 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-duplex-oscillation-publish |
Malicious release: Malicious code in cybernetics-duplex-wolf-json (npm) MAL-2025-186438 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-duplex-wolf-json |
Malicious release: Malicious code in cybernetics-selenology-local-eridanus (npm) MAL-2025-186439 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-selenology-local-eridanus |
Malicious release: Malicious code in cybernetics-uninstall-kinetic-neptune (npm) MAL-2025-186440 | Malicious | Not scored | 13 Nov, 2025 | npm cybernetics-uninstall-kinetic-neptune |
Malicious release: Malicious code in cygnus-got-nconf-public (npm) MAL-2025-186441 | Malicious | Not scored | 13 Nov, 2025 | npm cygnus-got-nconf-public |
Malicious release: Malicious code in cygnus-tool-update-xenos (npm) MAL-2025-186442 | Malicious | Not scored | 13 Nov, 2025 | npm cygnus-tool-update-xenos |
Malicious release: Malicious code in cygnus-umbra-webdriver-mocha-docusaurus (npm) MAL-2025-186443 | Malicious | Not scored | 13 Nov, 2025 | npm cygnus-umbra-webdriver-mocha-docusaurus |
Malicious release: Malicious code in cygnus-whitedwarf-entanglement-google (npm) MAL-2025-186444 | Malicious | Not scored | 13 Nov, 2025 | npm cygnus-whitedwarf-entanglement-google |
Malicious release: Malicious code in cygnus-winston-geodynamo-biomimicry (npm) MAL-2025-186445 | Malicious | Not scored | 13 Nov, 2025 | npm cygnus-winston-geodynamo-biomimicry |
Malicious release: Malicious code in cypress-cosmiconfig-dotenv-safe-telesto (npm) MAL-2025-186446 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-cosmiconfig-dotenv-safe-telesto |
Malicious release: Malicious code in cypress-enif-robotics-miranda (npm) MAL-2025-186447 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-enif-robotics-miranda |
Malicious release: Malicious code in cypress-geckodriver-vulcan-metalsmith (npm) MAL-2025-186448 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-geckodriver-vulcan-metalsmith |
Malicious release: Malicious code in cypress-phoenix-higgs-chromedriver (npm) MAL-2025-186449 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-phoenix-higgs-chromedriver |
Malicious release: Malicious code in cypress-procyon-neptune-epigenetics (npm) MAL-2025-186450 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-procyon-neptune-epigenetics |
Malicious release: Malicious code in cypress-technosignature-solarnebula-protractor (npm) MAL-2025-186451 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-technosignature-solarnebula-protractor |
Malicious release: Malicious code in cypress-vuetify-mutation-hermes (npm) MAL-2025-186452 | Malicious | Not scored | 13 Nov, 2025 | npm cypress-vuetify-mutation-hermes |
Malicious release: Malicious code in cz-conventional-changelog-blitz-steganography-lacerta (npm) MAL-2025-186453 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-blitz-steganography-lacerta |
Malicious release: Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha (npm) MAL-2025-186454 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-heliophysics-carpo-mocha |
Malicious release: Malicious code in cz-conventional-changelog-ora-rehype-xanadu (npm) MAL-2025-186455 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-ora-rehype-xanadu |
Malicious release: Malicious code in cz-conventional-changelog-selenium-xanadu-enif (npm) MAL-2025-186456 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-selenium-xanadu-enif |
Malicious release: Malicious code in cz-conventional-changelog-sirius-cluster-tectonophysics (npm) MAL-2025-186457 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-sirius-cluster-tectonophysics |
Malicious release: Malicious code in cz-conventional-changelog-stop-readable-mutation (npm) MAL-2025-186458 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-stop-readable-mutation |
Malicious release: Malicious code in cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis (npm) MAL-2025-186459 | Malicious | Not scored | 13 Nov, 2025 | npm cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis |
Malicious release: Malicious code in dactyl-loopback-axios-lacerta (npm) MAL-2025-186460 | Malicious | Not scored | 13 Nov, 2025 | npm dactyl-loopback-axios-lacerta |
Malicious release: Malicious code in dactyl-phoenix-rest-gulp (npm) MAL-2025-186461 | Malicious | Not scored | 13 Nov, 2025 | npm dactyl-phoenix-rest-gulp |
Malicious release: Malicious code in dactyl-transform-nightwatch-petrology (npm) MAL-2025-186462 | Malicious | Not scored | 13 Nov, 2025 | npm dactyl-transform-nightwatch-petrology |
Malicious release: Malicious code in daemon-container-rain-route-reject (npm) MAL-2025-186463 | Malicious | Not scored | 13 Nov, 2025 | npm daemon-container-rain-route-reject |