Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cookie-mapper (npm) MAL-2025-192728, SNYK-JS-COOKIEMAPPER-14152249 | Malicious | Not scored | 23 Dec, 2025 | npm cookie-mapper |
Malicious release: Malicious code in cookie-breaker (npm) MAL-2025-192727, SNYK-JS-COOKIEBREAKER-14152248 | Malicious | Not scored | 23 Dec, 2025 | npm cookie-breaker |
Malicious release: Malicious code in cms_comp_popup (npm) MAL-2025-192726 | Malicious | Not scored | 23 Dec, 2025 | npm cms_comp_popup |
Malicious release: Malicious code in chai-pack (npm) MAL-2025-192725, SNYK-JS-CHAIPACK-14152241 | Malicious | Not scored | 23 Dec, 2025 | npm chai-pack |
Malicious release: Malicious code in chai-as-validated (npm) GHSA-xhmc-g8hp-fgqq, MAL-2025-192724 | Malicious | Not scored | 23 Dec, 2025 | npm chai-as-validated |
Malicious release: Malicious code in chai-as-tested (npm) MAL-2025-192723, SNYK-JS-CHAIASTESTED-14152236 | Malicious | Not scored | 23 Dec, 2025 | npm chai-as-tested |
Malicious release: Malicious code in chai-as-deploy (npm) MAL-2025-192722, SNYK-JS-CHAIASDEPLOY-14152234 | Malicious | Not scored | 23 Dec, 2025 | npm chai-as-deploy |
Malicious release: Malicious code in caterpillar-test (npm) MAL-2025-192721 | Malicious | Not scored | 23 Dec, 2025 | npm caterpillar-test |
Malicious release: Malicious code in canva-test (npm) MAL-2025-192720 | Malicious | Not scored | 23 Dec, 2025 | npm canva-test |
Malicious release: Malicious code in calculator-40ed (npm) MAL-2025-192719 | Malicious | Not scored | 23 Dec, 2025 | npm calculator-40ed |
Malicious release: Malicious code in bootstrap-setflexcolor (npm) MAL-2025-192718, SNYK-JS-BOOTSTRAPSETFLEXCOLOR-14152233 | Malicious | Not scored | 23 Dec, 2025 | npm bootstrap-setflexcolor |
Malicious release: Malicious code in bootstrap-setcolors (npm) MAL-2025-192717, SNYK-JS-BOOTSTRAPSETCOLORS-14152232 | Malicious | Not scored | 23 Dec, 2025 | npm bootstrap-setcolors |
Malicious release: Malicious code in bootstrap-setcolor (npm) MAL-2025-192716, SNYK-JS-BOOTSTRAPSETCOLOR-14152231 | Malicious | Not scored | 23 Dec, 2025 | npm bootstrap-setcolor |
Malicious release: Malicious code in booms-ai (npm) MAL-2025-192715 | Malicious | Not scored | 23 Dec, 2025 | npm booms-ai |
Malicious release: Malicious code in bignumberx (npm) MAL-2025-192714 | Malicious | Not scored | 23 Dec, 2025 | npm bignumberx |
Malicious release: Malicious code in baidu-src-test4 (npm) MAL-2025-192713 | Malicious | Not scored | 23 Dec, 2025 | npm baidu-src-test4 |
Malicious release: Malicious code in auth-handler (npm) MAL-2025-192712, SNYK-JS-AUTHHANDLER-14152228 | Malicious | Not scored | 23 Dec, 2025 | npm auth-handler |
Malicious release: Malicious code in assert-json-not (npm) MAL-2025-192711, SNYK-JS-ASSERTJSONNOT-14152227 | Malicious | Not scored | 23 Dec, 2025 | npm assert-json-not |
Malicious release: Malicious code in amournapraia (npm) MAL-2025-192710 | Malicious | Not scored | 23 Dec, 2025 | npm amournapraia |
Malicious release: Malicious code in amazon-testpackage (npm) MAL-2025-192709 | Malicious | Not scored | 23 Dec, 2025 | npm amazon-testpackage |
Malicious release: Malicious code in alicenpmpackage (npm) MAL-2025-192708 | Malicious | Not scored | 23 Dec, 2025 | npm alicenpmpackage |
Malicious release: Malicious code in acz.view.src (npm) MAL-2025-192707 | Malicious | Not scored | 23 Dec, 2025 | npm acz.view.src |
Malicious release: Malicious code in @ownbackup/ob-loader (npm) MAL-2025-192705 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/ob-loader |
Malicious release: Malicious code in @ownbackup/ob-query-builder (npm) MAL-2025-192706 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/ob-query-builder |
Malicious release: Malicious code in @ownbackup/ob-design-system (npm) MAL-2025-192704 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/ob-design-system |
Malicious release: Malicious code in @ownbackup/icons (npm) MAL-2025-192703 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/icons |
Malicious release: Malicious code in @ownbackup/data-chart (npm) MAL-2025-192701 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/data-chart |
Malicious release: Malicious code in @ownbackup/data-grid (npm) MAL-2025-192702 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/data-grid |
Malicious release: Malicious code in @ads-core/types (npm) GHSA-6xvr-cfwp-7mv9, MAL-2025-192700 | Malicious | Not scored | 23 Dec, 2025 | npm @ads-core/types |
Malicious release: Malicious code in mw-frontend-utils (npm) GHSA-337v-g6xp-2crp, MAL-2025-192697 | Malicious | Not scored | 22 Dec, 2025 | npm mw-frontend-utils |
Malicious release: Malicious code in ro-mobile (npm) GHSA-85m3-w425-6v48, MAL-2025-192698 | Malicious | Not scored | 22 Dec, 2025 | npm ro-mobile |
Malicious release: Malicious code in @vienna_cancer_center_portal/js (npm) GHSA-98m9-fmm5-76w2, MAL-2025-192692 | Malicious | Not scored | 22 Dec, 2025 | npm @vienna_cancer_center_portal/js |
Malicious release: Malicious code in dc-extras (npm) GHSA-cfqp-cvx7-r4w3, MAL-2025-192694 | Malicious | Not scored | 22 Dec, 2025 | npm dc-extras |
Malicious release: Malicious code in mui-wrapper-core (npm) GHSA-m8v6-5crc-5m6w, MAL-2025-192696 | Malicious | Not scored | 22 Dec, 2025 | npm mui-wrapper-core |
Malicious release: Malicious code in airslate-dep-webpack (npm) MAL-2025-192693 | Malicious | Not scored | 22 Dec, 2025 | npm airslate-dep-webpack |
Malicious release: Malicious code in ivx-cloud-client-v1 (npm) MAL-2025-192695 | Malicious | Not scored | 22 Dec, 2025 | npm ivx-cloud-client-v1 |
Malicious release: Malicious code in cloudy-uvi-sense-v11 (npm) MAL-2025-192691 | Malicious | Not scored | 22 Dec, 2025 | npm cloudy-uvi-sense-v11 |
Malicious release: Malicious code in smtrlib (PyPI) MAL-2025-192690 | Malicious | Not scored | 22 Dec, 2025 | PyPI smtrlib |
Malicious release: Malicious code in unizip (PyPI) MAL-2025-192689 | Malicious | Not scored | 22 Dec, 2025 | PyPI unizip |
Malicious release: Malicious code in utif-updated (npm) GHSA-j9gx-q4v7-8gh6, MAL-2025-192688 | Malicious | Not scored | 22 Dec, 2025 | npm utif-updated |
Malicious release: Malicious code in tiny-model-update (npm) GHSA-7m8x-5j4f-qj6p, MAL-2026-47 | Malicious | Not scored | 22 Dec, 2025 | npm tiny-model-update |
Malicious release: Malicious code in commander-stable (npm) GHSA-mmcm-p5h7-xjhw, MAL-2025-192687 | Malicious | Not scored | 22 Dec, 2025 | npm commander-stable |
Malicious release: Malicious code in secguest-lib (npm) GHSA-33c5-f4q2-c358, MAL-2026-169 | Malicious | Not scored | 22 Dec, 2025 | npm secguest-lib |
Malicious release: Malicious code in github-badge-bot (npm) GHSA-r39w-33gw-8p5g, MAL-2026-46 | Malicious | Not scored | 21 Dec, 2025 | npm github-badge-bot |
Malicious release: Malicious code in hooktest-fin (PyPI) MAL-2025-192685 | Malicious | Not scored | 21 Dec, 2025 | PyPI hooktest-fin |
Malicious release: Malicious code in runtimeutils (PyPI) MAL-2025-192686 | Malicious | Not scored | 21 Dec, 2025 | PyPI runtimeutils |
Malicious release: Malicious code in colorfulpacket (PyPI) MAL-2025-192684 | Malicious | Not scored | 21 Dec, 2025 | PyPI colorfulpacket |
Malicious release: Malicious code in meta-code-verify (npm) GHSA-vwm7-m2x4-j99q, MAL-2026-134 | Malicious | Not scored | 21 Dec, 2025 | npm meta-code-verify |
Malicious release: Malicious code in ai-cypher (PyPI) MAL-2025-192683 | Malicious | Not scored | 21 Dec, 2025 | PyPI ai-cypher |
Malicious release: Malicious code in @nosinovacao/nosid-mfe-common (npm) GHSA-3xxx-vrmx-pg3x, MAL-2025-192682 | Malicious | Not scored | 20 Dec, 2025 | npm @nosinovacao/nosid-mfe-common |