Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in sds-auth-ui (npm) GHSA-8vxx-c327-477r, MAL-2025-192580 | Malicious | Not scored | 16 Dec, 2025 | npm sds-auth-ui |
Malicious release: Malicious code in sds-oauth-client (npm) GHSA-wf9w-2w3f-44v4, MAL-2025-192581 | Malicious | Not scored | 16 Dec, 2025 | npm sds-oauth-client |
Malicious release: Malicious code in smtblib (PyPI) MAL-2025-192579 | Malicious | Not scored | 15 Dec, 2025 | PyPI smtblib |
Malicious release: Malicious code in xboxlive-auth (npm) GHSA-q7m9-qpv4-57jh, MAL-2025-192578 | Malicious | Not scored | 15 Dec, 2025 | npm xboxlive-auth |
Malicious release: Malicious code in bignumex (npm) GHSA-cvwj-6h92-w2cp, MAL-2025-192574, SNYK-JS-BIGNUMEX-14417296 | Malicious | Not scored | 15 Dec, 2025 | npm bignumex |
Malicious release: Malicious code in polygon-src (npm) GHSA-x2rc-mfgw-jfp8, MAL-2025-192575 | Malicious | Not scored | 15 Dec, 2025 | npm polygon-src |
Malicious release: Malicious code in @revvity-signals/chemdraw-js (npm) GHSA-2vh3-gf8f-8524, MAL-2025-192573, SNYK-JS-REVVITYSIGNALSCHEMDRAWJS-14417298 | Malicious | Not scored | 15 Dec, 2025 | npm @revvity-signals/chemdraw-js |
Malicious release: Malicious code in sd-security (npm) GHSA-g69f-6vrm-x88p, MAL-2025-192576, SNYK-JS-SDSECURITY-14417303 | Malicious | Not scored | 15 Dec, 2025 | npm sd-security |
Malicious release: Malicious code in sd-skbms (npm) GHSA-ww9c-3crf-rqcp, MAL-2025-192577, SNYK-JS-SDSKBMS-14417297 | Malicious | Not scored | 15 Dec, 2025 | npm sd-skbms |
Malicious release: Malicious code in phx-core (npm) GHSA-jfqw-pq2x-x7rg, MAL-2025-192572, SNYK-JS-PHXCORE-14417293 | Malicious | Not scored | 15 Dec, 2025 | npm phx-core |
Malicious release: Malicious code in paypal-scripts-server-utils (npm) GHSA-97r7-62jh-mxcf, MAL-2025-192571, SNYK-JS-PAYPALSCRIPTSSERVERUTILS-14417292 | Malicious | Not scored | 15 Dec, 2025 | npm paypal-scripts-server-utils |
Malicious release: Malicious code in @mohamed1687/iut-encrypt (npm) GHSA-xvw5-m66f-f7g7, MAL-2025-192570 | Malicious | Not scored | 15 Dec, 2025 | npm @mohamed1687/iut-encrypt |
Malicious release: Malicious code in @ikarem/telemetry (npm) GHSA-5q62-g32j-g4hp, MAL-2025-192569 | Malicious | Not scored | 14 Dec, 2025 | npm @ikarem/telemetry |
Malicious release: Malicious code in kashif-mallah-fca (npm) GHSA-pxvw-rf2w-m2h5, MAL-2025-192560 | Malicious | Not scored | 12 Dec, 2025 | npm kashif-mallah-fca |
Malicious release: Malicious code in iraza2-fca (npm) GHSA-rqh5-r89j-39xw, MAL-2025-192559 | Malicious | Not scored | 12 Dec, 2025 | npm iraza2-fca |
Malicious release: Malicious code in pp-js-lib (npm) GHSA-6hj5-4pqh-pfcv, MAL-2025-192561, SNYK-JS-PPJSLIB-14400615 | Malicious | Not scored | 12 Dec, 2025 | npm pp-js-lib |
Malicious release: Malicious code in cms_comp (npm) GHSA-7766-4vwr-vg78, MAL-2025-192555, SNYK-JS-CMSCOMP-14400618 | Malicious | Not scored | 12 Dec, 2025 | npm cms_comp |
Malicious release: Malicious code in cms_comp_static (npm) GHSA-7r25-49qj-j573, MAL-2025-192556, SNYK-JS-CMSCOMPSTATIC-14400632 | Malicious | Not scored | 12 Dec, 2025 | npm cms_comp_static |
Malicious release: Malicious code in sd-pay (npm) GHSA-ff56-h5vh-jf27, MAL-2025-192562, SNYK-JS-SDPAY-14400621 | Malicious | Not scored | 12 Dec, 2025 | npm sd-pay |
Malicious release: Malicious code in eslint-config-zoo (npm) GHSA-hjjq-fpv6-8gjx, MAL-2025-192558, SNYK-JS-ESLINTCONFIGZOO-14400623 | Malicious | Not scored | 12 Dec, 2025 | npm eslint-config-zoo |
Malicious release: Malicious code in camscanner-seo (npm) GHSA-p6gw-m8w7-8rqv, MAL-2025-192554, SNYK-JS-CAMSCANNERSEO-14400625 | Malicious | Not scored | 12 Dec, 2025 | npm camscanner-seo |
Malicious release: Malicious code in uba-plugins (npm) GHSA-qg89-j3ph-h5cc, MAL-2025-192567, SNYK-JS-UBAPLUGINS-14400630 | Malicious | Not scored | 12 Dec, 2025 | npm uba-plugins |
Malicious release: Malicious code in sd-pay-ts (npm) GHSA-x35w-cc75-vw5x, MAL-2025-192563, SNYK-JS-SDPAYTS-14400617 | Malicious | Not scored | 12 Dec, 2025 | npm sd-pay-ts |
Malicious release: Malicious code in sdbao-content-sems (npm) GHSA-m87p-xpm6-rjwq, MAL-2025-192565, SNYK-JS-SDBAOCONTENTSEMS-14400622 | Malicious | Not scored | 12 Dec, 2025 | npm sdbao-content-sems |
Malicious release: Malicious code in cos-js-sdk-v6 (npm) GHSA-r77x-55q8-xq2v, MAL-2025-192557, SNYK-JS-COSJSSDKV6-14400628 | Malicious | Not scored | 12 Dec, 2025 | npm cos-js-sdk-v6 |
Malicious release: Malicious code in sdbao-content-report (npm) GHSA-xqgm-344j-vx3r, MAL-2025-192564, SNYK-JS-SDBAOCONTENTREPORT-14400616 | Malicious | Not scored | 12 Dec, 2025 | npm sdbao-content-report |
Malicious release: Malicious code in abrhide (npm) GHSA-qfhx-g3q3-qqhf, MAL-2025-192553, SNYK-JS-ABRHIDE-14400624 | Malicious | Not scored | 12 Dec, 2025 | npm abrhide |
Malicious release: Malicious code in shopify-monorail (npm) GHSA-7887-g92r-gq3x, MAL-2025-192566, SNYK-JS-SHOPIFYMONORAIL-14400620 | Malicious | Not scored | 12 Dec, 2025 | npm shopify-monorail |
Malicious release: Malicious code in afruitmaliciousxmlparser (npm) GHSA-6cmq-v5c3-6595, MAL-2025-192544 | Malicious | Not scored | 12 Dec, 2025 | npm afruitmaliciousxmlparser |
Malicious release: Malicious code in cfruitmaliciousxmlparser (npm) GHSA-8g6q-xxph-xhc9, MAL-2025-192546, SNYK-JS-CFRUITMALICIOUSXMLPARSER-14400614 | Malicious | Not scored | 12 Dec, 2025 | npm cfruitmaliciousxmlparser |
Malicious release: Malicious code in ffruitmaliciousxmlparser (npm) GHSA-c36q-p2q6-736g, MAL-2025-192549 | Malicious | Not scored | 12 Dec, 2025 | npm ffruitmaliciousxmlparser |
Malicious release: Malicious code in efruitmaliciousxmlparser (npm) GHSA-qhw7-w9cj-645j, MAL-2025-192548, SNYK-JS-EFRUITMALICIOUSXMLPARSER-14400609 | Malicious | Not scored | 12 Dec, 2025 | npm efruitmaliciousxmlparser |
Malicious release: Malicious code in hfruitmaliciousxmlparser (npm) GHSA-r3xm-cx76-jqcm, MAL-2025-192552 | Malicious | Not scored | 12 Dec, 2025 | npm hfruitmaliciousxmlparser |
Malicious release: Malicious code in gfruitmaliciousxmlparser (npm) GHSA-rr49-5crf-m37w, MAL-2025-192551 | Malicious | Not scored | 12 Dec, 2025 | npm gfruitmaliciousxmlparser |
Malicious release: Malicious code in fruit-malicious-xml-parser (npm) GHSA-v98g-g97w-9v2m, MAL-2025-192550 | Malicious | Not scored | 12 Dec, 2025 | npm fruit-malicious-xml-parser |
Malicious release: Malicious code in bfruitmaliciousxmlparser (npm) GHSA-vgwp-j59p-9gqh, MAL-2025-192545 | Malicious | Not scored | 12 Dec, 2025 | npm bfruitmaliciousxmlparser |
Malicious release: Malicious code in dfruitmaliciousxmlparser (npm) GHSA-w5jw-8c3r-g952, MAL-2025-192547 | Malicious | Not scored | 12 Dec, 2025 | npm dfruitmaliciousxmlparser |
Malicious release: Malicious code in elf-stats-aurora-sleigh-694 (npm) GHSA-3mrg-49rh-ccpr, MAL-2025-192470 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-aurora-sleigh-694 |
Malicious release: Malicious code in elf-stats-jubilant-wreath-403 (npm) GHSA-6pjc-2pqh-5g58, MAL-2025-192510 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-jubilant-wreath-403 |
Malicious release: Malicious code in elf-stats-candlelit-nutcracker-184 (npm) GHSA-gpm8-w66h-gj7p, MAL-2025-192472, SNYK-JS-ELFSTATSCANDLELITNUTCRACKER184-14417288 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-candlelit-nutcracker-184 |
Malicious release: Malicious code in elf-stats-sugarplum-snowman-116 (npm) GHSA-jp85-pm3j-h8fv, MAL-2025-192534, SNYK-JS-ELFSTATSSUGARPLUMSNOWMAN116-14424328 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-sugarplum-snowman-116 |
Malicious release: Malicious code in elf-stats-marzipan-cocoa-977 (npm) GHSA-p54x-vhc6-q7qm, MAL-2025-192512 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-marzipan-cocoa-977 |
Malicious release: Malicious code in elf-stats-caroling-hammer-382 (npm) GHSA-pqq3-j2hh-3v3q, MAL-2025-192480 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-caroling-hammer-382 |
Malicious release: Malicious code in elf-stats-cosy-ribbon-689 (npm) GHSA-qghv-95jm-5j3c, MAL-2025-192490 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-cosy-ribbon-689 |
Malicious release: Malicious code in elf-stats-fuzzy-fireplace-615 (npm) GHSA-qmrm-cmvr-9v88, MAL-2025-192502 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-fuzzy-fireplace-615 |
Malicious release: Malicious code in elf-stats-ember-stocking-807 (npm) GHSA-v25f-jpvx-84x8, MAL-2025-192494 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-ember-stocking-807 |
Malicious release: Malicious code in elf-stats (npm) GHSA-vj9q-8xm9-p95h, MAL-2025-192469 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats |
Malicious release: Malicious code in elf-stats-holly-stocking-294 (npm) GHSA-x65w-hcj6-m6gp, MAL-2025-192507 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-holly-stocking-294 |
Malicious release: Malicious code in elf-stats-aurora-sparkler-752 (npm) MAL-2025-192471 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-aurora-sparkler-752 |
Malicious release: Malicious code in elf-stats-candlelit-train-228 (npm) MAL-2025-192473 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-candlelit-train-228 |