Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in okta-mfa-library (npm) GHSA-f899-4p56-hmr6, MAL-2025-192634 | Malicious | Not scored | 19 Dec, 2025 | npm okta-mfa-library |
Malicious release: Malicious code in foundations-theming-base (npm) GHSA-jhwf-9xjp-jmjc, MAL-2025-192630 | Malicious | Not scored | 19 Dec, 2025 | npm foundations-theming-base |
Malicious release: Malicious code in @xyuxu/i18never (npm) GHSA-jg82-rrfm-828g, MAL-2025-192617 | Malicious | Not scored | 19 Dec, 2025 | npm @xyuxu/i18never |
Malicious release: Malicious code in graphlink (npm) GHSA-r79x-phr5-c8hh, MAL-2025-192631 | Malicious | Not scored | 19 Dec, 2025 | npm graphlink |
Malicious release: Malicious code in tailwind-color-shine (npm) GHSA-3gcf-759q-x9mf, MAL-2025-192641 | Malicious | Not scored | 19 Dec, 2025 | npm tailwind-color-shine |
Malicious release: Malicious code in tailwind-animationbased (npm) GHSA-wp25-rrp2-mfgj, MAL-2025-192640 | Malicious | Not scored | 19 Dec, 2025 | npm tailwind-animationbased |
Malicious release: Malicious code in tailwind-logic (npm) GHSA-wx97-rv6p-cv3m, MAL-2025-192642 | Malicious | Not scored | 19 Dec, 2025 | npm tailwind-logic |
Malicious release: Malicious code in elf-stats-sugarplum-fir-770 (npm) GHSA-qr3v-425m-r87p, MAL-2025-192627 | Malicious | Not scored | 19 Dec, 2025 | npm elf-stats-sugarplum-fir-770 |
Malicious release: Malicious code in chai-async (npm) GHSA-6535-pvh6-vwm7, MAL-2025-192623 | Malicious | Not scored | 19 Dec, 2025 | npm chai-async |
Malicious release: Malicious code in chai-nerd (npm) GHSA-82hw-vpr3-m9xq, MAL-2025-192624 | Malicious | Not scored | 19 Dec, 2025 | npm chai-nerd |
Malicious release: Malicious code in android_teminator_x (npm) GHSA-82q6-mqx2-hr2q, MAL-2025-192620 | Malicious | Not scored | 19 Dec, 2025 | npm android_teminator_x |
Malicious release: Malicious code in @pluxee-design-system/core (npm) GHSA-wp76-x9rq-pfwh, MAL-2025-192616 | Malicious | Not scored | 19 Dec, 2025 | npm @pluxee-design-system/core |
Malicious release: Malicious code in ctfparsertna (npm) GHSA-q2x3-q94m-hf34, MAL-2025-192611 | Malicious | Not scored | 19 Dec, 2025 | npm ctfparsertna |
Malicious release: Malicious code in ctfxmlflgcheck (npm) GHSA-w7xc-m6g5-74rg, MAL-2025-192612 | Malicious | Not scored | 19 Dec, 2025 | npm ctfxmlflgcheck |
Malicious release: Malicious code in parashaxmgflhg (npm) GHSA-39f8-x9x3-mmjh, MAL-2025-192635 | Malicious | Not scored | 19 Dec, 2025 | npm parashaxmgflhg |
Malicious release: Malicious code in my-ctf-package (npm) GHSA-8v4j-c8g9-wfh2, MAL-2025-192613 | Malicious | Not scored | 19 Dec, 2025 | npm my-ctf-package |
Malicious release: Malicious code in tnactgfds (npm) GHSA-gw69-296w-f9h8, MAL-2025-192615 | Malicious | Not scored | 19 Dec, 2025 | npm tnactgfds |
Malicious release: Malicious code in flagstealerfinal (npm) GHSA-x5xj-9r4p-43cv, MAL-2025-192629 | Malicious | Not scored | 19 Dec, 2025 | npm flagstealerfinal |
Malicious release: Malicious code in ctfepakageflgs (npm) GHSA-xw2v-qv2g-q2mx, MAL-2025-192610 | Malicious | Not scored | 19 Dec, 2025 | npm ctfepakageflgs |
Malicious release: Malicious code in connections-api-hidden-runner (PyPI) MAL-2025-192658 | Malicious | Not scored | 19 Dec, 2025 | PyPI connections-api-hidden-runner |
Malicious release: Malicious code in hidden-powershell-runner-ax7 (PyPI) MAL-2025-192659 | Malicious | Not scored | 19 Dec, 2025 | PyPI hidden-powershell-runner-ax7 |
Malicious release: Malicious code in react-enhanced-glow (npm) GHSA-gg53-7w5q-f52p, MAL-2025-192614 | Malicious | Not scored | 19 Dec, 2025 | npm react-enhanced-glow |
Malicious release: Malicious code in f5rest (PyPI) MAL-2025-192609 | Malicious | Not scored | 18 Dec, 2025 | PyPI f5rest |
Malicious release: Malicious code in f5-logger (PyPI) MAL-2025-192608 | Malicious | Not scored | 18 Dec, 2025 | PyPI f5-logger |
Malicious release: Malicious code in bigip (PyPI) MAL-2025-192607 | Malicious | Not scored | 18 Dec, 2025 | PyPI bigip |
Malicious release: Malicious code in sarumaan_a (npm) MAL-2025-192606 | Malicious | Not scored | 18 Dec, 2025 | npm sarumaan_a |
Malicious release: Malicious code in trondec (PyPI) MAL-2025-192605 | Malicious | Not scored | 17 Dec, 2025 | PyPI trondec |
Malicious release: Malicious code in xbox-bottomnav (npm) MAL-2025-192604 | Malicious | Not scored | 17 Dec, 2025 | npm xbox-bottomnav |
Malicious release: Malicious code in vitor-js (npm) GHSA-x8pc-c9x5-4hj2, MAL-2025-192603 | Malicious | Not scored | 17 Dec, 2025 | npm vitor-js |
Malicious release: Malicious code in plugin-senna (npm) GHSA-935r-3293-428p, MAL-2025-192602 | Malicious | Not scored | 17 Dec, 2025 | npm plugin-senna |
Malicious release: Malicious code in vscode-azure-mcp-server (npm) GHSA-g3xg-r65r-rjp9, MAL-2025-192601 | Malicious | Not scored | 16 Dec, 2025 | npm vscode-azure-mcp-server |
Malicious release: Malicious code in raven-hubspot (npm) GHSA-wggj-3c6j-49w5, MAL-2025-192597 | Malicious | Not scored | 16 Dec, 2025 | npm raven-hubspot |
Malicious release: Malicious code in tailwind-variables (npm) GHSA-2fr9-wfcg-g278, MAL-2025-192600 | Malicious | Not scored | 16 Dec, 2025 | npm tailwind-variables |
Malicious release: Malicious code in tailwind-stylecss (npm) GHSA-6p9g-26px-4p2j, MAL-2025-192599 | Malicious | Not scored | 16 Dec, 2025 | npm tailwind-stylecss |
Malicious release: Malicious code in bigmathlib (npm) GHSA-5mv4-pjx6-7x42, MAL-2025-192598, SNYK-JS-BIGMATHLIB-14423941 | Malicious | Not scored | 16 Dec, 2025 | npm bigmathlib |
Malicious release: Malicious code in example-vue2-micro (npm) GHSA-9rqv-9897-8v59, MAL-2025-192590, SNYK-JS-EXAMPLEVUE2MICRO-14423937 | Malicious | Not scored | 16 Dec, 2025 | npm example-vue2-micro |
Malicious release: Malicious code in openhands-frontend (npm) GHSA-f5xm-4hwm-3fmf, MAL-2025-192593, SNYK-JS-OPENHANDSFRONTEND-14423935 | Malicious | Not scored | 16 Dec, 2025 | npm openhands-frontend |
Malicious release: Malicious code in dubbo-js-private-workspace (npm) GHSA-fhq4-8wqq-qjw8, MAL-2025-192586, SNYK-JS-DUBBOJSPRIVATEWORKSPACE-14423931 | Malicious | Not scored | 16 Dec, 2025 | npm dubbo-js-private-workspace |
Malicious release: Malicious code in nad-home (npm) GHSA-3j59-8fh5-f32x, MAL-2025-192592, SNYK-JS-NADHOME-14423943 | Malicious | Not scored | 16 Dec, 2025 | npm nad-home |
Malicious release: Malicious code in smart-utils-alice (npm) GHSA-6fwq-962w-p65h, MAL-2025-192595, SNYK-JS-SMARTUTILSALICE-14423944 | Malicious | Not scored | 16 Dec, 2025 | npm smart-utils-alice |
Malicious release: Malicious code in i18never (npm) GHSA-h3qr-rcp8-8x7v, MAL-2025-192591, SNYK-JS-I18NEVER-14423938 | Malicious | Not scored | 16 Dec, 2025 | npm i18never |
Malicious release: Malicious code in prod-natwest (npm) GHSA-r372-c736-29hr, MAL-2025-192594, SNYK-JS-PRODNATWEST-14423932 | Malicious | Not scored | 16 Dec, 2025 | npm prod-natwest |
Malicious release: Malicious code in starling-api (npm) GHSA-xmqp-vmx8-v537, MAL-2025-192596, SNYK-JS-STARLINGAPI-14423939 | Malicious | Not scored | 16 Dec, 2025 | npm starling-api |
Malicious release: Malicious code in elf-stats-aurora-cocoa-911 (npm) GHSA-4vv5-g9j4-6v4v, MAL-2025-192587 | Malicious | Not scored | 16 Dec, 2025 | npm elf-stats-aurora-cocoa-911 |
Malicious release: Malicious code in elf-stats-fuzzy-wreath-278 (npm) GHSA-rhvr-922h-rhwj, MAL-2025-192588 | Malicious | Not scored | 16 Dec, 2025 | npm elf-stats-fuzzy-wreath-278 |
Malicious release: Malicious code in jsondatatoruby (npm) MAL-2025-192584 | Malicious | Not scored | 16 Dec, 2025 | npm jsondatatoruby |
Malicious release: Malicious code in elf-stats-nutmeg-sleigh-350 (npm) GHSA-r2xw-jwfw-jh45, MAL-2025-192589 | Malicious | Not scored | 16 Dec, 2025 | npm elf-stats-nutmeg-sleigh-350 |
Malicious release: Malicious code in betterjsloggin (npm) GHSA-g9v2-5x8c-cwcp, MAL-2025-192585 | Malicious | Not scored | 16 Dec, 2025 | npm betterjsloggin |
Malicious release: Malicious code in swissid-common (npm) GHSA-r5fr-fvr3-8vpc, MAL-2025-192583, SNYK-JS-SWISSIDCOMMON-14423922 | Malicious | Not scored | 16 Dec, 2025 | npm swissid-common |
Malicious release: Malicious code in sds-swissid-common (npm) GHSA-xr56-7xpv-9gcq, MAL-2025-192582 | Malicious | Not scored | 16 Dec, 2025 | npm sds-swissid-common |