Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in higgs-ichnology-paleoceanography-pm2 (npm) MAL-2025-187360 | Malicious | Not scored | 13 Nov, 2025 | npm higgs-ichnology-paleoceanography-pm2 |
Malicious release: Malicious code in higgs-markdown-pdf-kaus-helmet (npm) MAL-2025-187361 | Malicious | Not scored | 13 Nov, 2025 | npm higgs-markdown-pdf-kaus-helmet |
Malicious release: Malicious code in hologram-jekyll-radiometric-bellatrix (npm) MAL-2025-187362 | Malicious | Not scored | 13 Nov, 2025 | npm hologram-jekyll-radiometric-bellatrix |
Malicious release: Malicious code in hologram-oscillation-config-nestjs (npm) MAL-2025-187363 | Malicious | Not scored | 13 Nov, 2025 | npm hologram-oscillation-config-nestjs |
Malicious release: Malicious code in holography-antares-enif-callback (npm) MAL-2025-187364 | Malicious | Not scored | 13 Nov, 2025 | npm holography-antares-enif-callback |
Malicious release: Malicious code in holography-commitizen-kardashevscale-morgan (npm) MAL-2025-187365 | Malicious | Not scored | 13 Nov, 2025 | npm holography-commitizen-kardashevscale-morgan |
Malicious release: Malicious code in holography-commitlint-xml-unuk (npm) MAL-2025-187366 | Malicious | Not scored | 13 Nov, 2025 | npm holography-commitlint-xml-unuk |
Malicious release: Malicious code in holography-development-nightmare-uranology (npm) MAL-2025-187367 | Malicious | Not scored | 13 Nov, 2025 | npm holography-development-nightmare-uranology |
Malicious release: Malicious code in holography-hercules-janus-postcss (npm) MAL-2025-187368 | Malicious | Not scored | 13 Nov, 2025 | npm holography-hercules-janus-postcss |
Malicious release: Malicious code in hot-awk-authorize-float-interface (npm) MAL-2025-187369 | Malicious | Not scored | 13 Nov, 2025 | npm hot-awk-authorize-float-interface |
Malicious release: Malicious code in hot-float-moon-unix-fork (npm) MAL-2025-187370 | Malicious | Not scored | 13 Nov, 2025 | npm hot-float-moon-unix-fork |
Malicious release: Malicious code in hot-thread-cold-fast-epsilon (npm) MAL-2025-187371 | Malicious | Not scored | 13 Nov, 2025 | npm hot-thread-cold-fast-epsilon |
Malicious release: Malicious code in html-webpack-plugin-atlas-global-lacerta (npm) MAL-2025-187372 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-atlas-global-lacerta |
Malicious release: Malicious code in html-webpack-plugin-deimos-toml-command (npm) MAL-2025-187373 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-deimos-toml-command |
Malicious release: Malicious code in html-webpack-plugin-hologram-stream-install (npm) MAL-2025-187374 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-hologram-stream-install |
Malicious release: Malicious code in html-webpack-plugin-multiverse-proteomics-blackhole (npm) MAL-2025-187375 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-multiverse-proteomics-blackhole |
Malicious release: Malicious code in html-webpack-plugin-promise-meteor-dactyl (npm) MAL-2025-187376 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-promise-meteor-dactyl |
Malicious release: Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm) MAL-2025-187377 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-taphonomy-test-coronalmassejection |
Malicious release: Malicious code in html-webpack-plugin-vega-atlas-fetch (npm) MAL-2025-187378 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-vega-atlas-fetch |
Malicious release: Malicious code in html-webpack-plugin-version-vulcan-rollup (npm) MAL-2025-187379 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-version-vulcan-rollup |
Malicious release: Malicious code in html-webpack-plugin-wavefunction-local-ora (npm) MAL-2025-187380 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-wavefunction-local-ora |
Malicious release: Malicious code in html-webpack-plugin-zenobia-nebula-antares (npm) MAL-2025-187381 | Malicious | Not scored | 13 Nov, 2025 | npm html-webpack-plugin-zenobia-nebula-antares |
Malicious release: Malicious code in hugo-build-configstore-rollup-plugin (npm) MAL-2025-187382 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-build-configstore-rollup-plugin |
Malicious release: Malicious code in hugo-capella-janus-nucleosynthesis (npm) MAL-2025-187383 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-capella-janus-nucleosynthesis |
Malicious release: Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm) MAL-2025-187384 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-mini-css-extract-plugin-ophiuchus-convict |
Malicious release: Malicious code in hugo-miranda-prettier-stylelint-xenon (npm) MAL-2025-187385 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-miranda-prettier-stylelint-xenon |
Malicious release: Malicious code in hugo-nashira-boson-passport (npm) MAL-2025-187386 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-nashira-boson-passport |
Malicious release: Malicious code in hugo-plutology-comet-cluster (npm) MAL-2025-187387 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-plutology-comet-cluster |
Malicious release: Malicious code in hugo-unuk-leda-altair (npm) MAL-2025-187388 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-unuk-leda-altair |
Malicious release: Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm) MAL-2025-187389 | Malicious | Not scored | 13 Nov, 2025 | npm hugo-wavefunction-dotenv-parse-variables-parallax |
Malicious release: Malicious code in husky-build-toml-troposphere (npm) MAL-2025-187390 | Malicious | Not scored | 13 Nov, 2025 | npm husky-build-toml-troposphere |
Malicious release: Malicious code in husky-bulma-nebula-concurrently (npm) MAL-2025-187391 | Malicious | Not scored | 13 Nov, 2025 | npm husky-bulma-nebula-concurrently |
Malicious release: Malicious code in husky-despina-readable-oscillation (npm) MAL-2025-187392 | Malicious | Not scored | 13 Nov, 2025 | npm husky-despina-readable-oscillation |
Malicious release: Malicious code in husky-eridanus-quasar-geckodriver (npm) MAL-2025-187393 | Malicious | Not scored | 13 Nov, 2025 | npm husky-eridanus-quasar-geckodriver |
Malicious release: Malicious code in husky-glaciology-weywot-rest (npm) MAL-2025-187394 | Malicious | Not scored | 13 Nov, 2025 | npm husky-glaciology-weywot-rest |
Malicious release: Malicious code in husky-helios-wezen-nextjs (npm) MAL-2025-187395 | Malicious | Not scored | 13 Nov, 2025 | npm husky-helios-wezen-nextjs |
Malicious release: Malicious code in hydra-cryovolcano-darkmatter-quasarjet (npm) MAL-2025-187396 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-cryovolcano-darkmatter-quasarjet |
Malicious release: Malicious code in hydra-duplex-npm-ophiuchus (npm) MAL-2025-187397 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-duplex-npm-ophiuchus |
Malicious release: Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin (npm) MAL-2025-187398 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-hawkingradiation-markdownlint-mini-css-extract-plugin |
Malicious release: Malicious code in hydra-helmet-terser-webpack-plugin-ignite (npm) MAL-2025-187399 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-helmet-terser-webpack-plugin-ignite |
Malicious release: Malicious code in hydra-hermes-ichnology-ariel (npm) MAL-2025-187400 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-hermes-ichnology-ariel |
Malicious release: Malicious code in hydra-lepton-interstellarmedium-entanglement (npm) MAL-2025-187401 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-lepton-interstellarmedium-entanglement |
Malicious release: Malicious code in hydra-markdown-pdf-resolvers-postcss (npm) MAL-2025-187402 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-markdown-pdf-resolvers-postcss |
Malicious release: Malicious code in hydra-publish-filament-prettier-plugin-markdown (npm) MAL-2025-187403 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-publish-filament-prettier-plugin-markdown |
Malicious release: Malicious code in hydra-regulus-wavefunction-spectron (npm) MAL-2025-187404 | Malicious | Not scored | 13 Nov, 2025 | npm hydra-regulus-wavefunction-spectron |
Malicious release: Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm) MAL-2025-187405 | Malicious | Not scored | 13 Nov, 2025 | npm hydrogeology-chariklo-pulsar-mini-css-extract-plugin |
Malicious release: Malicious code in hydrogeology-hydra-phoenix-fornax (npm) MAL-2025-187406 | Malicious | Not scored | 13 Nov, 2025 | npm hydrogeology-hydra-phoenix-fornax |
Malicious release: Malicious code in hydrogeology-mesosphere-event-troposphere (npm) MAL-2025-187407 | Malicious | Not scored | 13 Nov, 2025 | npm hydrogeology-mesosphere-event-troposphere |
Malicious release: Malicious code in hyperion-build-style-loader-lynx (npm) MAL-2025-187408 | Malicious | Not scored | 13 Nov, 2025 | npm hyperion-build-style-loader-lynx |
Malicious release: Malicious code in hyperion-capella-auth0-planetology (npm) MAL-2025-187409 | Malicious | Not scored | 13 Nov, 2025 | npm hyperion-capella-auth0-planetology |