Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in chalk-cli (RubyGems) GHSA-4p78-xfgj-hmqm, MAL-2025-192896 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-cli |
Malicious release: Malicious code in chalk-aws (RubyGems) GHSA-3c36-fj22-cjxw, MAL-2025-192895 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-aws |
Malicious release: Malicious code in activestorage-redundancy (RubyGems) GHSA-hhwf-9gc7-jxcj, MAL-2025-192894 | Malicious | Not scored | 23 Dec, 2025 | RubyGems activestorage-redundancy |
Malicious release: Malicious code in fire-eye-bcs (PyPI) MAL-2025-192892 | Malicious | Not scored | 23 Dec, 2025 | PyPI fire-eye-bcs |
Malicious release: Malicious code in fireeye-main (PyPI) MAL-2025-192893 | Malicious | Not scored | 23 Dec, 2025 | PyPI fireeye-main |
Malicious release: Malicious code in blastchamber-python-pypi (PyPI) MAL-2025-192891 | Malicious | Not scored | 23 Dec, 2025 | PyPI blastchamber-python-pypi |
Malicious release: Malicious code in workvivo-chatbot (npm) MAL-2025-192887 | Malicious | Not scored | 23 Dec, 2025 | npm workvivo-chatbot |
Malicious release: Malicious code in workvivo-layout-extension (npm) MAL-2025-192888 | Malicious | Not scored | 23 Dec, 2025 | npm workvivo-layout-extension |
Malicious release: Malicious code in workvivo-anniversary-automation (npm) MAL-2025-192886 | Malicious | Not scored | 23 Dec, 2025 | npm workvivo-anniversary-automation |
Malicious release: Malicious code in wealthbox-marketing (npm) MAL-2025-192885 | Malicious | Not scored | 23 Dec, 2025 | npm wealthbox-marketing |
Malicious release: Malicious code in vite-react-setting (npm) MAL-2025-192884 | Malicious | Not scored | 23 Dec, 2025 | npm vite-react-setting |
Malicious release: Malicious code in varshade-afc (npm) MAL-2025-192883 | Malicious | Not scored | 23 Dec, 2025 | npm varshade-afc |
Malicious release: Malicious code in vapark-boost-v1 (npm) MAL-2025-192882 | Malicious | Not scored | 23 Dec, 2025 | npm vapark-boost-v1 |
Malicious release: Malicious code in typeface-maison-neue (npm) MAL-2025-192881 | Malicious | Not scored | 23 Dec, 2025 | npm typeface-maison-neue |
Malicious release: Malicious code in tierlist (npm) MAL-2025-192880 | Malicious | Not scored | 23 Dec, 2025 | npm tierlist |
Malicious release: Malicious code in tescoutils (npm) MAL-2025-192879 | Malicious | Not scored | 23 Dec, 2025 | npm tescoutils |
Malicious release: Malicious code in teeseest (npm) MAL-2025-192878 | Malicious | Not scored | 23 Dec, 2025 | npm teeseest |
Malicious release: Malicious code in tdm-react (npm) MAL-2025-192877 | Malicious | Not scored | 23 Dec, 2025 | npm tdm-react |
Malicious release: Malicious code in suntik-tiktok (npm) MAL-2025-192876 | Malicious | Not scored | 23 Dec, 2025 | npm suntik-tiktok |
Malicious release: Malicious code in sturdyfetch9 (npm) MAL-2025-192875 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch9 |
Malicious release: Malicious code in sturdyfetch5 (npm) MAL-2025-192874 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch5 |
Malicious release: Malicious code in sturdyfetch4 (npm) MAL-2025-192873 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch4 |
Malicious release: Malicious code in sturdyfetch3 (npm) MAL-2025-192872 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch3 |
Malicious release: Malicious code in sturdyfetch22 (npm) MAL-2025-192871 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch22 |
Malicious release: Malicious code in sturdyfetch21 (npm) MAL-2025-192870 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch21 |
Malicious release: Malicious code in sturdyfetch18 (npm) MAL-2025-192868 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch18 |
Malicious release: Malicious code in sturdyfetch19 (npm) MAL-2025-192869 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch19 |
Malicious release: Malicious code in sturdyfetch17 (npm) MAL-2025-192867 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch17 |
Malicious release: Malicious code in sturdyfetch15 (npm) MAL-2025-192866 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch15 |
Malicious release: Malicious code in streamlinear (npm) MAL-2025-192865 | Malicious | Not scored | 23 Dec, 2025 | npm streamlinear |
Malicious release: Malicious code in stream-chain-xor (npm) MAL-2025-192864 | Malicious | Not scored | 23 Dec, 2025 | npm stream-chain-xor |
Malicious release: Malicious code in smart-parser (npm) MAL-2025-192863, SNYK-JS-SMARTPARSER-14152306 | Malicious | Not scored | 23 Dec, 2025 | npm smart-parser |
Malicious release: Malicious code in session-parse (npm) MAL-2025-192862, SNYK-JS-SESSIONPARSE-14152303 | Malicious | Not scored | 23 Dec, 2025 | npm session-parse |
Malicious release: Malicious code in session-keeper (npm) MAL-2025-192861, SNYK-JS-SESSIONKEEPER-14152301 | Malicious | Not scored | 23 Dec, 2025 | npm session-keeper |
Malicious release: Malicious code in security-testing-research- (npm) MAL-2025-192859 | Malicious | Not scored | 23 Dec, 2025 | npm security-testing-research- |
Malicious release: Malicious code in security-testing-research99 (npm) MAL-2025-192860 | Malicious | Not scored | 23 Dec, 2025 | npm security-testing-research99 |
Malicious release: Malicious code in resethp (npm) MAL-2025-192858 | Malicious | Not scored | 23 Dec, 2025 | npm resethp |
Malicious release: Malicious code in redux-motion (npm) MAL-2025-192857, SNYK-JS-REDUXMOTION-14152297 | Malicious | Not scored | 23 Dec, 2025 | npm redux-motion |
Malicious release: Malicious code in react-resizable-text (npm) MAL-2025-192856, SNYK-JS-REACTRESIZABLETEXT-14152288 | Malicious | Not scored | 23 Dec, 2025 | npm react-resizable-text |
Malicious release: Malicious code in react-flex-tools (npm) MAL-2025-192855, SNYK-JS-REACTFLEXTOOLS-14152285 | Malicious | Not scored | 23 Dec, 2025 | npm react-flex-tools |
Malicious release: Malicious code in react-confetti-enhanced (npm) MAL-2025-192854 | Malicious | Not scored | 23 Dec, 2025 | npm react-confetti-enhanced |
Malicious release: Malicious code in portal-aes (npm) MAL-2025-192853 | Malicious | Not scored | 23 Dec, 2025 | npm portal-aes |
Malicious release: Malicious code in polyfill-corejs2 (npm) MAL-2025-192852 | Malicious | Not scored | 23 Dec, 2025 | npm polyfill-corejs2 |
Malicious release: Malicious code in petco-test (npm) MAL-2025-192851 | Malicious | Not scored | 23 Dec, 2025 | npm petco-test |
Malicious release: Malicious code in pentestlyio-testpackage (npm) MAL-2025-192850 | Malicious | Not scored | 23 Dec, 2025 | npm pentestlyio-testpackage |
Malicious release: Malicious code in oneday-worm-research (npm) MAL-2025-192849 | Malicious | Not scored | 23 Dec, 2025 | npm oneday-worm-research |
Malicious release: Malicious code in nokaca (npm) MAL-2025-192848 | Malicious | Not scored | 23 Dec, 2025 | npm nokaca |
Malicious release: Malicious code in node-calculator-x7k9-evil (npm) MAL-2025-192846 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-x7k9-evil |
Malicious release: Malicious code in node-calculator-x7k9-grabber (npm) MAL-2025-192847 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-x7k9-grabber |
Malicious release: Malicious code in node-calculator-fe54 (npm) MAL-2025-192845 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-fe54 |