Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in indus-reveal-md-gulp-neptune (npm) MAL-2025-187460 | Malicious | Not scored | 13 Nov, 2025 | npm indus-reveal-md-gulp-neptune |
Malicious release: Malicious code in indus-triton-polaris-nextjs (npm) MAL-2025-187461 | Malicious | Not scored | 13 Nov, 2025 | npm indus-triton-polaris-nextjs |
Malicious release: Malicious code in indus-virgo-publish-taurus (npm) MAL-2025-187462 | Malicious | Not scored | 13 Nov, 2025 | npm indus-virgo-publish-taurus |
Malicious release: Malicious code in inflation-antd-dependencies-phoenix (npm) MAL-2025-187463 | Malicious | Not scored | 13 Nov, 2025 | npm inflation-antd-dependencies-phoenix |
Malicious release: Malicious code in inflation-apollo-rocket-higgs (npm) MAL-2025-187464 | Malicious | Not scored | 13 Nov, 2025 | npm inflation-apollo-rocket-higgs |
Malicious release: Malicious code in inflation-hercules-websockets-private (npm) MAL-2025-187465 | Malicious | Not scored | 13 Nov, 2025 | npm inflation-hercules-websockets-private |
Malicious release: Malicious code in inflation-technocracy-css-minimizer-webpack-plugin-await (npm) MAL-2025-187466 | Malicious | Not scored | 13 Nov, 2025 | npm inflation-technocracy-css-minimizer-webpack-plugin-await |
Malicious release: Malicious code in inflation-weywot-comet-xo (npm) MAL-2025-187467 | Malicious | Not scored | 13 Nov, 2025 | npm inflation-weywot-comet-xo |
Malicious release: Malicious code in info-byte-simulate-cat-sudo (npm) MAL-2025-187468 | Malicious | Not scored | 13 Nov, 2025 | npm info-byte-simulate-cat-sudo |
Malicious release: Malicious code in info-user-wind-book-sanitize (npm) MAL-2025-187469 | Malicious | Not scored | 13 Nov, 2025 | npm info-user-wind-book-sanitize |
Malicious release: Malicious code in ini-barnard-juno-shelljs (npm) MAL-2025-187470 | Malicious | Not scored | 13 Nov, 2025 | npm ini-barnard-juno-shelljs |
Malicious release: Malicious code in ini-koa-adonis-astrometry (npm) MAL-2025-187471 | Malicious | Not scored | 13 Nov, 2025 | npm ini-koa-adonis-astrometry |
Malicious release: Malicious code in ini-mongodb-got-socketio (npm) MAL-2025-187472 | Malicious | Not scored | 13 Nov, 2025 | npm ini-mongodb-got-socketio |
Malicious release: Malicious code in ini-quito-stratosphere-slides (npm) MAL-2025-187473 | Malicious | Not scored | 13 Nov, 2025 | npm ini-quito-stratosphere-slides |
Malicious release: Malicious code in init-charon-terser-upgrade (npm) MAL-2025-187474 | Malicious | Not scored | 13 Nov, 2025 | npm init-charon-terser-upgrade |
Malicious release: Malicious code in init-enceladus-quark-terraforming (npm) MAL-2025-187475 | Malicious | Not scored | 13 Nov, 2025 | npm init-enceladus-quark-terraforming |
Malicious release: Malicious code in init-mui-exobiology-local (npm) MAL-2025-187476 | Malicious | Not scored | 13 Nov, 2025 | npm init-mui-exobiology-local |
Malicious release: Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus (npm) MAL-2025-187477 | Malicious | Not scored | 13 Nov, 2025 | npm init-optimize-css-assets-webpack-plugin-nodejs-grus |
Malicious release: Malicious code in init-parcel-run-script-hugo (npm) MAL-2025-187478 | Malicious | Not scored | 13 Nov, 2025 | npm init-parcel-run-script-hugo |
Malicious release: Malicious code in init-publish-boson-apex (npm) MAL-2025-187479 | Malicious | Not scored | 13 Nov, 2025 | npm init-publish-boson-apex |
Malicious release: Malicious code in init-rest-sedna-gacrux (npm) MAL-2025-187480 | Malicious | Not scored | 13 Nov, 2025 | npm init-rest-sedna-gacrux |
Malicious release: Malicious code in init-venus-sync-figures (npm) MAL-2025-187481 | Malicious | Not scored | 13 Nov, 2025 | npm init-venus-sync-figures |
Malicious release: Malicious code in innercore-alphard-eslint-config-xerxes (npm) MAL-2025-187482 | Malicious | Not scored | 13 Nov, 2025 | npm innercore-alphard-eslint-config-xerxes |
Malicious release: Malicious code in innercore-biohacking-aether-inflation (npm) MAL-2025-187483 | Malicious | Not scored | 13 Nov, 2025 | npm innercore-biohacking-aether-inflation |
Malicious release: Malicious code in innercore-magnetar-xerxes-galaxy (npm) MAL-2025-187484 | Malicious | Not scored | 13 Nov, 2025 | npm innercore-magnetar-xerxes-galaxy |
Malicious release: Malicious code in innercore-superposition-lint-staged-adonis (npm) MAL-2025-187485 | Malicious | Not scored | 13 Nov, 2025 | npm innercore-superposition-lint-staged-adonis |
Malicious release: Malicious code in innercore-yildun-blaze-robotics (npm) MAL-2025-187486 | Malicious | Not scored | 13 Nov, 2025 | npm innercore-yildun-blaze-robotics |
Malicious release: Malicious code in inquirer-flare-sass-loader-tectonic (npm) MAL-2025-187487 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-flare-sass-loader-tectonic |
Malicious release: Malicious code in inquirer-loop-airbnb-proxima (npm) MAL-2025-187488 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-loop-airbnb-proxima |
Malicious release: Malicious code in inquirer-quasar-polaris-aquarius (npm) MAL-2025-187489 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-quasar-polaris-aquarius |
Malicious release: Malicious code in inquirer-resonance-stratosphere-zenobia (npm) MAL-2025-187490 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-resonance-stratosphere-zenobia |
Malicious release: Malicious code in inquirer-stream-metabolomics-uninstall (npm) MAL-2025-187491 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-stream-metabolomics-uninstall |
Malicious release: Malicious code in inquirer-technosignature-slidev-sagitta (npm) MAL-2025-187492 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-technosignature-slidev-sagitta |
Malicious release: Malicious code in inquirer-winston-commitlint-cosmiconfig (npm) MAL-2025-187493 | Malicious | Not scored | 13 Nov, 2025 | npm inquirer-winston-commitlint-cosmiconfig |
Malicious release: Malicious code in install-bunyan-bellatrix-impulse (npm) MAL-2025-187494 | Malicious | Not scored | 13 Nov, 2025 | npm install-bunyan-bellatrix-impulse |
Malicious release: Malicious code in install-enceladus-mesosphere-superflare (npm) MAL-2025-187495 | Malicious | Not scored | 13 Nov, 2025 | npm install-enceladus-mesosphere-superflare |
Malicious release: Malicious code in install-enif-blitz-supervisor (npm) MAL-2025-187496 | Malicious | Not scored | 13 Nov, 2025 | npm install-enif-blitz-supervisor |
Malicious release: Malicious code in install-fork-mdx-websockets (npm) MAL-2025-187497 | Malicious | Not scored | 13 Nov, 2025 | npm install-fork-mdx-websockets |
Malicious release: Malicious code in install-geckodriver-blueshift-native (npm) MAL-2025-187498 | Malicious | Not scored | 13 Nov, 2025 | npm install-geckodriver-blueshift-native |
Malicious release: Malicious code in integer-kappa-sigma-double-view (npm) MAL-2025-187499 | Malicious | Not scored | 13 Nov, 2025 | npm integer-kappa-sigma-double-view |
Malicious release: Malicious code in integer-lambda-notify-cache-try (npm) MAL-2025-187500 | Malicious | Not scored | 13 Nov, 2025 | npm integer-lambda-notify-cache-try |
Malicious release: Malicious code in integer-omega-virtualize-star-meta (npm) MAL-2025-187501 | Malicious | Not scored | 13 Nov, 2025 | npm integer-omega-virtualize-star-meta |
Malicious release: Malicious code in integer-optimize-alpha-byte-authenticate (npm) MAL-2025-187502 | Malicious | Not scored | 13 Nov, 2025 | npm integer-optimize-alpha-byte-authenticate |
Malicious release: Malicious code in integer-pipe-beta-orchestrate-simulate (npm) MAL-2025-187503 | Malicious | Not scored | 13 Nov, 2025 | npm integer-pipe-beta-orchestrate-simulate |
Malicious release: Malicious code in integer-simulate-mu-class-permission (npm) MAL-2025-187504 | Malicious | Not scored | 13 Nov, 2025 | npm integer-simulate-mu-class-permission |
Malicious release: Malicious code in integer-slow-java-object-string (npm) MAL-2025-187505 | Malicious | Not scored | 13 Nov, 2025 | npm integer-slow-java-object-string |
Malicious release: Malicious code in integer-tau-chi-alert-gamma (npm) MAL-2025-187506 | Malicious | Not scored | 13 Nov, 2025 | npm integer-tau-chi-alert-gamma |
Malicious release: Malicious code in integer-web-key-resolve-mu (npm) MAL-2025-187507 | Malicious | Not scored | 13 Nov, 2025 | npm integer-web-key-resolve-mu |
Malicious release: Malicious code in interface-awk-balance-epsilon-orchestrate (npm) MAL-2025-187508 | Malicious | Not scored | 13 Nov, 2025 | npm interface-awk-balance-epsilon-orchestrate |
Malicious release: Malicious code in interface-iota-tau-optimize-bundle (npm) MAL-2025-187509 | Malicious | Not scored | 13 Nov, 2025 | npm interface-iota-tau-optimize-bundle |