Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in heka-zenobia-pyxis-mui (npm) MAL-2025-187310 | Malicious | Not scored | 13 Nov, 2025 | npm heka-zenobia-pyxis-mui |
Malicious release: Malicious code in heliophysics-aurora-lint-staged-global (npm) MAL-2025-187311 | Malicious | Not scored | 13 Nov, 2025 | npm heliophysics-aurora-lint-staged-global |
Malicious release: Malicious code in heliophysics-blackhole-ganymede-cluster (npm) MAL-2025-187312 | Malicious | Not scored | 13 Nov, 2025 | npm heliophysics-blackhole-ganymede-cluster |
Malicious release: Malicious code in heliophysics-pino-umbriel-request (npm) MAL-2025-187313 | Malicious | Not scored | 13 Nov, 2025 | npm heliophysics-pino-umbriel-request |
Malicious release: Malicious code in helios-centaurus-juno-lint-staged (npm) MAL-2025-187314 | Malicious | Not scored | 13 Nov, 2025 | npm helios-centaurus-juno-lint-staged |
Malicious release: Malicious code in helios-cressida-biogeochemistry-halley (npm) MAL-2025-187315 | Malicious | Not scored | 13 Nov, 2025 | npm helios-cressida-biogeochemistry-halley |
Malicious release: Malicious code in helios-epigenetics-asteroid-eclipse (npm) MAL-2025-187316 | Malicious | Not scored | 13 Nov, 2025 | npm helios-epigenetics-asteroid-eclipse |
Malicious release: Malicious code in helios-fusion-rollup-command (npm) MAL-2025-187317 | Malicious | Not scored | 13 Nov, 2025 | npm helios-fusion-rollup-command |
Malicious release: Malicious code in helios-jekyll-polaris-soap (npm) MAL-2025-187318 | Malicious | Not scored | 13 Nov, 2025 | npm helios-jekyll-polaris-soap |
Malicious release: Malicious code in helios-nightwatch-tethys-eridanus (npm) MAL-2025-187319 | Malicious | Not scored | 13 Nov, 2025 | npm helios-nightwatch-tethys-eridanus |
Malicious release: Malicious code in helios-webdriver-mocha-superposition-phylogenetics (npm) MAL-2025-187320 | Malicious | Not scored | 13 Nov, 2025 | npm helios-webdriver-mocha-superposition-phylogenetics |
Malicious release: Malicious code in helios-zenobia-geckodriver-rigel (npm) MAL-2025-187321 | Malicious | Not scored | 13 Nov, 2025 | npm helios-zenobia-geckodriver-rigel |
Malicious release: Malicious code in helmet-blitz-izar-update (npm) MAL-2025-187322 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-blitz-izar-update |
Malicious release: Malicious code in helmet-geochronology-rigel-sails (npm) MAL-2025-187323 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-geochronology-rigel-sails |
Malicious release: Malicious code in helmet-neutronstar-xo-xerxes (npm) MAL-2025-187324 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-neutronstar-xo-xerxes |
Malicious release: Malicious code in helmet-pegasus-non-blocking-phoebe (npm) MAL-2025-187325 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-pegasus-non-blocking-phoebe |
Malicious release: Malicious code in helmet-radiant-babel-dorado (npm) MAL-2025-187326 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-radiant-babel-dorado |
Malicious release: Malicious code in helmet-release-it-enceladus-figures (npm) MAL-2025-187327 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-release-it-enceladus-figures |
Malicious release: Malicious code in helmet-sagitta-saturnology-element-ui (npm) MAL-2025-187328 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-sagitta-saturnology-element-ui |
Malicious release: Malicious code in helmet-sirius-ini-mocha (npm) MAL-2025-187329 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-sirius-ini-mocha |
Malicious release: Malicious code in helmet-supercluster-release-it-technosignature (npm) MAL-2025-187330 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-supercluster-release-it-technosignature |
Malicious release: Malicious code in helmet-terser-isostasy-nova (npm) MAL-2025-187331 | Malicious | Not scored | 13 Nov, 2025 | npm helmet-terser-isostasy-nova |
Malicious release: Malicious code in hercules-config-juno-void (npm) MAL-2025-187332 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-config-juno-void |
Malicious release: Malicious code in hercules-css-loader-restart-eslint-plugin (npm) MAL-2025-187333 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-css-loader-restart-eslint-plugin |
Malicious release: Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm) MAL-2025-187334 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado |
Malicious release: Malicious code in hercules-deimos-superagent-webdriverio (npm) MAL-2025-187335 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-deimos-superagent-webdriverio |
Malicious release: Malicious code in hercules-fermion-hyperion-version (npm) MAL-2025-187336 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-fermion-hyperion-version |
Malicious release: Malicious code in hercules-local-ceres-backend (npm) MAL-2025-187337 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-local-ceres-backend |
Malicious release: Malicious code in hercules-pyxis-rehype-hermes (npm) MAL-2025-187338 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-pyxis-rehype-hermes |
Malicious release: Malicious code in hercules-radiant-jekyll-delphinus (npm) MAL-2025-187339 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-radiant-jekyll-delphinus |
Malicious release: Malicious code in hercules-winston-janus-miranda (npm) MAL-2025-187340 | Malicious | Not scored | 13 Nov, 2025 | npm hercules-winston-janus-miranda |
Malicious release: Malicious code in hermes-browserify-alphard-greatfilter (npm) MAL-2025-187341 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-browserify-alphard-greatfilter |
Malicious release: Malicious code in hermes-child-process-apex-centauri (npm) MAL-2025-187342 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-child-process-apex-centauri |
Malicious release: Malicious code in hermes-config-unuk-aurora (npm) MAL-2025-187343 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-config-unuk-aurora |
Malicious release: Malicious code in hermes-dactyl-canopus-flare (npm) MAL-2025-187344 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-dactyl-canopus-flare |
Malicious release: Malicious code in hermes-jekyll-io-nightwatch (npm) MAL-2025-187345 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-jekyll-io-nightwatch |
Malicious release: Malicious code in hermes-polaris-regulus-apollo (npm) MAL-2025-187346 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-polaris-regulus-apollo |
Malicious release: Malicious code in hermes-venus-cosmos-rest (npm) MAL-2025-187347 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-venus-cosmos-rest |
Malicious release: Malicious code in hermes-version-mdx-yaml (npm) MAL-2025-187348 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-version-mdx-yaml |
Malicious release: Malicious code in hermes-websockets-arcturus-meteor (npm) MAL-2025-187349 | Malicious | Not scored | 13 Nov, 2025 | npm hermes-websockets-arcturus-meteor |
Malicious release: Malicious code in hexo-boson-charon-framework (npm) MAL-2025-187350 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-boson-charon-framework |
Malicious release: Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune (npm) MAL-2025-187351 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-commitlint-config-angular-nuxtjs-neptune |
Malicious release: Malicious code in hexo-duplex-xenos-bootstrap (npm) MAL-2025-187352 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-duplex-xenos-bootstrap |
Malicious release: Malicious code in hexo-interstellarmedium-spinner-less (npm) MAL-2025-187353 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-interstellarmedium-spinner-less |
Malicious release: Malicious code in hexo-phenomic-odin-element-ui (npm) MAL-2025-187354 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-phenomic-odin-element-ui |
Malicious release: Malicious code in hexo-publish-hexo-xo (npm) MAL-2025-187355 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-publish-hexo-xo |
Malicious release: Malicious code in hexo-restart-farout-sync (npm) MAL-2025-187356 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-restart-farout-sync |
Malicious release: Malicious code in hexo-steganography-cli-standard (npm) MAL-2025-187357 | Malicious | Not scored | 13 Nov, 2025 | npm hexo-steganography-cli-standard |
Malicious release: Malicious code in higgs-biosignature-inflation-upgrade (npm) MAL-2025-187358 | Malicious | Not scored | 13 Nov, 2025 | npm higgs-biosignature-inflation-upgrade |
Malicious release: Malicious code in higgs-commitizen-aether-archaeogenetics (npm) MAL-2025-187359 | Malicious | Not scored | 13 Nov, 2025 | npm higgs-commitizen-aether-archaeogenetics |