Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in othw (npm) MAL-2025-192681 | Malicious | Not scored | 20 Dec, 2025 | npm othw |
Malicious release: Malicious code in escaux-scrumboard-api (npm) MAL-2025-192680 | Malicious | Not scored | 20 Dec, 2025 | npm escaux-scrumboard-api |
Malicious release: Malicious code in jest-stable (npm) MAL-2025-192678 | Malicious | Not scored | 19 Dec, 2025 | npm jest-stable |
Malicious release: Malicious code in system-health-check-test-unique (PyPI) MAL-2025-192679 | Malicious | Not scored | 19 Dec, 2025 | PyPI system-health-check-test-unique |
Malicious release: Malicious code in shakti20261 (npm) GHSA-357m-gr33-h5ww, MAL-2025-192677 | Malicious | Not scored | 19 Dec, 2025 | npm shakti20261 |
Malicious release: Malicious code in wifi-killer-xnet (npm) GHSA-3jp3-7hvx-xvrp, MAL-2025-192672 | Malicious | Not scored | 19 Dec, 2025 | npm wifi-killer-xnet |
Malicious release: Malicious code in zebracros-bahlil (npm) GHSA-3jvv-6p8r-85xm, MAL-2025-192676 | Malicious | Not scored | 19 Dec, 2025 | npm zebracros-bahlil |
Malicious release: Malicious code in adeliana-xnetgpt (npm) GHSA-5vvc-ghph-2q6r, MAL-2025-192662 | Malicious | Not scored | 19 Dec, 2025 | npm adeliana-xnetgpt |
Malicious release: Malicious code in xnetgpt (npm) GHSA-5xjm-7w5x-5r5h, MAL-2025-192674 | Malicious | Not scored | 19 Dec, 2025 | npm xnetgpt |
Malicious release: Malicious code in adel-xnetgpt (npm) GHSA-cj6p-hpgc-rf68, MAL-2025-192661 | Malicious | Not scored | 19 Dec, 2025 | npm adel-xnetgpt |
Malicious release: Malicious code in nmapchecker (npm) GHSA-cw79-7675-r9wh, MAL-2025-192669 | Malicious | Not scored | 19 Dec, 2025 | npm nmapchecker |
Malicious release: Malicious code in ddos-gacor-v2 (npm) GHSA-gj5x-fhwg-4hqp, MAL-2025-192668 | Malicious | Not scored | 19 Dec, 2025 | npm ddos-gacor-v2 |
Malicious release: Malicious code in xnetgpt-lite (npm) GHSA-j59m-fvrw-mr87, MAL-2025-192675 | Malicious | Not scored | 19 Dec, 2025 | npm xnetgpt-lite |
Malicious release: Malicious code in sonia3-npm-js (npm) GHSA-mq4w-m6vr-gm8g, MAL-2025-192670 | Malicious | Not scored | 19 Dec, 2025 | npm sonia3-npm-js |
Malicious release: Malicious code in spamsms (npm) GHSA-rwfg-wjgq-jp43, MAL-2025-192671 | Malicious | Not scored | 19 Dec, 2025 | npm spamsms |
Malicious release: Malicious code in @sodexo-connect/sap-cdc-client (npm) GHSA-cmx2-4gj4-x3h2, MAL-2025-192660 | Malicious | Not scored | 19 Dec, 2025 | npm @sodexo-connect/sap-cdc-client |
Malicious release: Malicious code in asdfgh33 (npm) GHSA-687c-w69p-pvr7, MAL-2025-192664 | Malicious | Not scored | 19 Dec, 2025 | npm asdfgh33 |
Malicious release: Malicious code in xmlwtf3 (npm) GHSA-qjqf-48qf-vvmr, MAL-2025-192673 | Malicious | Not scored | 19 Dec, 2025 | npm xmlwtf3 |
Malicious release: Malicious code in ahmed_salem_o (npm) GHSA-75rh-f487-q44w, MAL-2025-192663 | Malicious | Not scored | 19 Dec, 2025 | npm ahmed_salem_o |
Malicious release: Malicious code in ctfvamp (npm) GHSA-4p2c-4c8x-774p, MAL-2025-192666 | Malicious | Not scored | 19 Dec, 2025 | npm ctfvamp |
Malicious release: Malicious code in ctfvampir (npm) GHSA-j92w-g7pq-jc8x, MAL-2025-192667 | Malicious | Not scored | 19 Dec, 2025 | npm ctfvampir |
Malicious release: Malicious code in baidu-tester (npm) GHSA-2gvp-3425-fwcc, MAL-2025-192665 | Malicious | Not scored | 19 Dec, 2025 | npm baidu-tester |
Malicious release: Malicious code in chai-as-awaited (npm) GHSA-mr3j-pq8x-j9q8, MAL-2025-192622 | Malicious | Not scored | 19 Dec, 2025 | npm chai-as-awaited |
Malicious release: Malicious code in elf-stats-wintry-chimney-348 (npm) GHSA-5x69-3q5p-h54j, MAL-2025-192628 | Malicious | Not scored | 19 Dec, 2025 | npm elf-stats-wintry-chimney-348 |
Malicious release: Malicious code in elf-stats-cocoa-workshop-459 (npm) GHSA-g5f4-9h9x-jr4q, MAL-2025-192626 | Malicious | Not scored | 19 Dec, 2025 | npm elf-stats-cocoa-workshop-459 |
Malicious release: Malicious code in yt-smm (npm) GHSA-6xv9-8hr4-x9q2, MAL-2025-192657 | Malicious | Not scored | 19 Dec, 2025 | npm yt-smm |
Malicious release: Malicious code in smm-youtube (npm) GHSA-cq9w-cg3h-mhj5, MAL-2025-192639 | Malicious | Not scored | 19 Dec, 2025 | npm smm-youtube |
Malicious release: Malicious code in vdous (npm) GHSA-h39m-cq37-fg6g, MAL-2025-192645 | Malicious | Not scored | 19 Dec, 2025 | npm vdous |
Malicious release: Malicious code in xvxx (npm) GHSA-rxg8-v2hm-3442, MAL-2025-192656 | Malicious | Not scored | 19 Dec, 2025 | npm xvxx |
Malicious release: Malicious code in pwnxmljs2 (npm) GHSA-3cx9-h332-857h, MAL-2025-192637 | Malicious | Not scored | 19 Dec, 2025 | npm pwnxmljs2 |
Malicious release: Malicious code in viktorparserctf2 (npm) GHSA-3wmr-87f4-8rxv, MAL-2025-192648 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf2 |
Malicious release: Malicious code in viktorparserctf4 (npm) GHSA-57v4-px9x-6h6g, MAL-2025-192650 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf4 |
Malicious release: Malicious code in viktorparserctf6 (npm) GHSA-66gw-w3hf-7vw6, MAL-2025-192652 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf6 |
Malicious release: Malicious code in viktorparserctf8 (npm) GHSA-79c8-xmmg-36gp, MAL-2025-192654 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf8 |
Malicious release: Malicious code in viktorparserctf7 (npm) GHSA-8894-22wv-8p8x, MAL-2025-192653 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf7 |
Malicious release: Malicious code in viktorparserctf9 (npm) GHSA-8r5f-99gg-hgjv, MAL-2025-192655 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf9 |
Malicious release: Malicious code in viktor-xml-parser (npm) GHSA-94cq-mxpx-j58j, MAL-2025-192646 | Malicious | Not scored | 19 Dec, 2025 | npm viktor-xml-parser |
Malicious release: Malicious code in viktorparserctf5 (npm) GHSA-9cpw-wc5x-fc5j, MAL-2025-192651 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf5 |
Malicious release: Malicious code in qwqwqw (npm) GHSA-j5wv-7jr9-rg62, MAL-2025-192638 | Malicious | Not scored | 19 Dec, 2025 | npm qwqwqw |
Malicious release: Malicious code in azaza (npm) GHSA-p2cp-m776-2342, MAL-2025-192621 | Malicious | Not scored | 19 Dec, 2025 | npm azaza |
Malicious release: Malicious code in viktorparserctf (npm) GHSA-wq59-w28f-47g9, MAL-2025-192647 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf |
Malicious release: Malicious code in viktorparserctf3 (npm) GHSA-x4q3-mgpq-2wx3, MAL-2025-192649 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf3 |
Malicious release: Malicious code in test-mal-npm-pkg (npm) GHSA-w9g3-xmr8-6c3f, MAL-2025-192643 | Malicious | Not scored | 19 Dec, 2025 | npm test-mal-npm-pkg |
Malicious release: Malicious code in adk-github (npm) GHSA-5rq4-5p9w-gcpj, MAL-2025-192619 | Malicious | Not scored | 19 Dec, 2025 | npm adk-github |
Malicious release: Malicious code in adk-cli (npm) GHSA-w5rp-f22h-pwhr, MAL-2025-192618 | Malicious | Not scored | 19 Dec, 2025 | npm adk-cli |
Malicious release: Malicious code in ppppparserfruit (npm) GHSA-8vgw-rgm5-pjwq, MAL-2025-192636 | Malicious | Not scored | 19 Dec, 2025 | npm ppppparserfruit |
Malicious release: Malicious code in cursorparserfruit (npm) GHSA-qqjh-v9h4-2q9f, MAL-2025-192625 | Malicious | Not scored | 19 Dec, 2025 | npm cursorparserfruit |
Malicious release: Malicious code in hubstyletokens (npm) GHSA-xgqh-xq68-cvpf, MAL-2025-192633 | Malicious | Not scored | 19 Dec, 2025 | npm hubstyletokens |
Malicious release: Malicious code in usage-tracker-janus (npm) GHSA-63gq-h49m-vhwg, MAL-2025-192644 | Malicious | Not scored | 19 Dec, 2025 | npm usage-tracker-janus |
Malicious release: Malicious code in hubspotter-http (npm) GHSA-9xx4-mq9x-hvmh, MAL-2025-192632 | Malicious | Not scored | 19 Dec, 2025 | npm hubspotter-http |