Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in figures-duplex-magnetar-await (npm) MAL-2025-186964 | Malicious | Not scored | 13 Nov, 2025 | npm figures-duplex-magnetar-await |
Malicious release: Malicious code in figures-elara-lithosphere-cosmicsilence (npm) MAL-2025-186965 | Malicious | Not scored | 13 Nov, 2025 | npm figures-elara-lithosphere-cosmicsilence |
Malicious release: Malicious code in figures-mantle-docusaurus-promise (npm) MAL-2025-186966 | Malicious | Not scored | 13 Nov, 2025 | npm figures-mantle-docusaurus-promise |
Malicious release: Malicious code in figures-materialize-markdown-pdf-miranda (npm) MAL-2025-186967 | Malicious | Not scored | 13 Nov, 2025 | npm figures-materialize-markdown-pdf-miranda |
Malicious release: Malicious code in figures-middleware-proxima-jabbah (npm) MAL-2025-186968 | Malicious | Not scored | 13 Nov, 2025 | npm figures-middleware-proxima-jabbah |
Malicious release: Malicious code in figures-miranda-helmet-exec (npm) MAL-2025-186969 | Malicious | Not scored | 13 Nov, 2025 | npm figures-miranda-helmet-exec |
Malicious release: Malicious code in figures-proxima-sedna-envconfig (npm) MAL-2025-186970 | Malicious | Not scored | 13 Nov, 2025 | npm figures-proxima-sedna-envconfig |
Malicious release: Malicious code in filament-axios-node-config-jasmine (npm) MAL-2025-186971 | Malicious | Not scored | 13 Nov, 2025 | npm filament-axios-node-config-jasmine |
Malicious release: Malicious code in filament-tethys-brane-upgrade (npm) MAL-2025-186972 | Malicious | Not scored | 13 Nov, 2025 | npm filament-tethys-brane-upgrade |
Malicious release: Malicious code in filament-thuban-global-volcanology (npm) MAL-2025-186973 | Malicious | Not scored | 13 Nov, 2025 | npm filament-thuban-global-volcanology |
Malicious release: Malicious code in filament-xanthus-bellatrix-phoenix (npm) MAL-2025-186974 | Malicious | Not scored | 13 Nov, 2025 | npm filament-xanthus-bellatrix-phoenix |
Malicious release: Malicious code in file-decompress-gamma-wind-object (npm) MAL-2025-186975 | Malicious | Not scored | 13 Nov, 2025 | npm file-decompress-gamma-wind-object |
Malicious release: Malicious code in file-sed-hash-xi-sed (npm) MAL-2025-186976 | Malicious | Not scored | 13 Nov, 2025 | npm file-sed-hash-xi-sed |
Malicious release: Malicious code in final-bundle-zero-string-deserialize (npm) MAL-2025-186977 | Malicious | Not scored | 13 Nov, 2025 | npm final-bundle-zero-string-deserialize |
Malicious release: Malicious code in final-daemon-route-boolean-permission (npm) MAL-2025-186978 | Malicious | Not scored | 13 Nov, 2025 | npm final-daemon-route-boolean-permission |
Malicious release: Malicious code in final-dog-throw-resolve-short (npm) MAL-2025-186979 | Malicious | Not scored | 13 Nov, 2025 | npm final-dog-throw-resolve-short |
Malicious release: Malicious code in final-scale-static-yaml-debug (npm) MAL-2025-186980 | Malicious | Not scored | 13 Nov, 2025 | npm final-scale-static-yaml-debug |
Malicious release: Malicious code in final-secure-epsilon-catch-book (npm) MAL-2025-186981 | Malicious | Not scored | 13 Nov, 2025 | npm final-secure-epsilon-catch-book |
Malicious release: Malicious code in final-uglify-decrypt-enum-data (npm) MAL-2025-186982 | Malicious | Not scored | 13 Nov, 2025 | npm final-uglify-decrypt-enum-data |
Malicious release: Malicious code in finally-function-boolean-refactor-runtime (npm) MAL-2025-186983 | Malicious | Not scored | 13 Nov, 2025 | npm finally-function-boolean-refactor-runtime |
Malicious release: Malicious code in finally-notify-table-orchestrate-sigma (npm) MAL-2025-186984 | Malicious | Not scored | 13 Nov, 2025 | npm finally-notify-table-orchestrate-sigma |
Malicious release: Malicious code in finally-stack-error-cold-assert (npm) MAL-2025-186985 | Malicious | Not scored | 13 Nov, 2025 | npm finally-stack-error-cold-assert |
Malicious release: Malicious code in finally-validate-spy-transpile-scale (npm) MAL-2025-186986 | Malicious | Not scored | 13 Nov, 2025 | npm finally-validate-spy-transpile-scale |
Malicious release: Malicious code in firebase-antd-lyra-version (npm) MAL-2025-186987 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-antd-lyra-version |
Malicious release: Malicious code in firebase-command-ursa-websockets (npm) MAL-2025-186988 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-command-ursa-websockets |
Malicious release: Malicious code in firebase-ganymede-registry-async (npm) MAL-2025-186989 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-ganymede-registry-async |
Malicious release: Malicious code in firebase-helios-bionics-virtualreality (npm) MAL-2025-186990 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-helios-bionics-virtualreality |
Malicious release: Malicious code in firebase-indus-biogeochemistry-superagent (npm) MAL-2025-186991 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-indus-biogeochemistry-superagent |
Malicious release: Malicious code in firebase-postgres-gammarayburst-mutation (npm) MAL-2025-186992 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-postgres-gammarayburst-mutation |
Malicious release: Malicious code in firebase-selenology-blitz-eleventy (npm) MAL-2025-186993 | Malicious | Not scored | 13 Nov, 2025 | npm firebase-selenology-blitz-eleventy |
Malicious release: Malicious code in flare-backend-jsonp-orogeny (npm) MAL-2025-186994 | Malicious | Not scored | 13 Nov, 2025 | npm flare-backend-jsonp-orogeny |
Malicious release: Malicious code in flare-commitlint-hydra-astro (npm) MAL-2025-186995 | Malicious | Not scored | 13 Nov, 2025 | npm flare-commitlint-hydra-astro |
Malicious release: Malicious code in flare-ignite-graphql-eridanus (npm) MAL-2025-186996 | Malicious | Not scored | 13 Nov, 2025 | npm flare-ignite-graphql-eridanus |
Malicious release: Malicious code in flare-polaris-sadr-alphard (npm) MAL-2025-186997 | Malicious | Not scored | 13 Nov, 2025 | npm flare-polaris-sadr-alphard |
Malicious release: Malicious code in flare-sirius-parallax-cross-env (npm) MAL-2025-186998 | Malicious | Not scored | 13 Nov, 2025 | npm flare-sirius-parallax-cross-env |
Malicious release: Malicious code in float-beta-deploy-star-meta (npm) MAL-2025-186999 | Malicious | Not scored | 13 Nov, 2025 | npm float-beta-deploy-star-meta |
Malicious release: Malicious code in float-encrypt-awk-dog-export (npm) MAL-2025-187000 | Malicious | Not scored | 13 Nov, 2025 | npm float-encrypt-awk-dog-export |
Malicious release: Malicious code in float-new-route-benchmark-async (npm) MAL-2025-187001 | Malicious | Not scored | 13 Nov, 2025 | npm float-new-route-benchmark-async |
Malicious release: Malicious code in float-rain-finally-yaml-air (npm) MAL-2025-187002 | Malicious | Not scored | 13 Nov, 2025 | npm float-rain-finally-yaml-air |
Malicious release: Malicious code in fomalhaut-dysonswarm-ablation-google (npm) MAL-2025-187003 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-dysonswarm-ablation-google |
Malicious release: Malicious code in fomalhaut-jabbah-telesto-antares (npm) MAL-2025-187004 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-jabbah-telesto-antares |
Malicious release: Malicious code in fomalhaut-nashira-webdriverio-init (npm) MAL-2025-187005 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-nashira-webdriverio-init |
Malicious release: Malicious code in fomalhaut-ora-cybernetics-publish (npm) MAL-2025-187006 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-ora-cybernetics-publish |
Malicious release: Malicious code in fomalhaut-restart-loglevel-forever (npm) MAL-2025-187007 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-restart-loglevel-forever |
Malicious release: Malicious code in fomalhaut-venus-pavo-update (npm) MAL-2025-187008 | Malicious | Not scored | 13 Nov, 2025 | npm fomalhaut-venus-pavo-update |
Malicious release: Malicious code in forever-cygnus-postcss-jwt (npm) MAL-2025-187009 | Malicious | Not scored | 13 Nov, 2025 | npm forever-cygnus-postcss-jwt |
Malicious release: Malicious code in forever-cypress-public-package (npm) MAL-2025-187010 | Malicious | Not scored | 13 Nov, 2025 | npm forever-cypress-public-package |
Malicious release: Malicious code in forever-heka-polaris-elektra (npm) MAL-2025-187011 | Malicious | Not scored | 13 Nov, 2025 | npm forever-heka-polaris-elektra |
Malicious release: Malicious code in forever-iota-callback-vulcan (npm) MAL-2025-187012 | Malicious | Not scored | 13 Nov, 2025 | npm forever-iota-callback-vulcan |
Malicious release: Malicious code in forever-npm-sociobiology-cassini (npm) MAL-2025-187013 | Malicious | Not scored | 13 Nov, 2025 | npm forever-npm-sociobiology-cassini |