Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in elf-stats-sparkly-fir-398 (npm) MAL-2025-192531 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-sparkly-fir-398 |
Malicious release: Malicious code in elf-stats-sparkly-toolkit-821 (npm) MAL-2025-192532 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-sparkly-toolkit-821 |
Malicious release: Malicious code in elf-stats-sprucey-train-710 (npm) MAL-2025-192533 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-sprucey-train-710 |
Malicious release: Malicious code in elf-stats-sugarplum-toolkit-176 (npm) MAL-2025-192535 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-sugarplum-toolkit-176 |
Malicious release: Malicious code in elf-stats-sugarplum-wishlist-141 (npm) MAL-2025-192536 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-sugarplum-wishlist-141 |
Malicious release: Malicious code in elf-stats-tinsel-cookiejar-315 (npm) MAL-2025-192537 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-tinsel-cookiejar-315 |
Malicious release: Malicious code in elf-stats-tinsel-sleigh-669 (npm) MAL-2025-192538 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-tinsel-sleigh-669 |
Malicious release: Malicious code in elf-stats-twinkling-bell-867 (npm) MAL-2025-192539 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-twinkling-bell-867 |
Malicious release: Malicious code in elf-stats-twinkling-wishlist-283 (npm) MAL-2025-192540 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-twinkling-wishlist-283 |
Malicious release: Malicious code in yzip (PyPI) MAL-2025-192468 | Malicious | Not scored | 11 Dec, 2025 | PyPI yzip |
Malicious release: Malicious code in mw-proto-ts (npm) GHSA-g95x-gc97-8c32, MAL-2025-192543 | Malicious | Not scored | 11 Dec, 2025 | npm mw-proto-ts |
Malicious release: Malicious code in mui-wrapper-icons (npm) GHSA-c5f8-883m-6j44, MAL-2025-192541 | Malicious | Not scored | 11 Dec, 2025 | npm mui-wrapper-icons |
Malicious release: Malicious code in mui-wrapper-styles (npm) GHSA-3mq4-3vvv-jjrq, MAL-2025-192542 | Malicious | Not scored | 11 Dec, 2025 | npm mui-wrapper-styles |
Malicious release: Malicious code in tnaparserxml (npm) GHSA-37j4-5fh6-h5h6, MAL-2025-192465 | Malicious | Not scored | 11 Dec, 2025 | npm tnaparserxml |
Malicious release: Malicious code in elf-stats-ember-stockpile-448 (npm) GHSA-4m4c-4wq7-8vj3, MAL-2025-192442 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-ember-stockpile-448 |
Malicious release: Malicious code in fadafas3 (npm) GHSA-6h44-w72p-7j43, MAL-2025-192450 | Malicious | Not scored | 11 Dec, 2025 | npm fadafas3 |
Malicious release: Malicious code in elf-stats-merry-icicle-449 (npm) GHSA-7h89-jv4c-5hpg, MAL-2025-192444 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-merry-icicle-449 |
Malicious release: Malicious code in ofjaaah12 (npm) GHSA-7r9r-f3j7-969w, MAL-2025-192464 | Malicious | Not scored | 11 Dec, 2025 | npm ofjaaah12 |
Malicious release: Malicious code in elf-stats-silvered-mailbag-755 (npm) GHSA-84cm-jw9q-wr47, MAL-2025-192445 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-silvered-mailbag-755 |
Malicious release: Malicious code in elf-stats-jolly-hammer-980 (npm) GHSA-9qmh-jjxw-fpm2, MAL-2025-192443 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-jolly-hammer-980 |
Malicious release: Malicious code in elf-stats-sparkly-snowglobe-243 (npm) GHSA-cjq9-7vg8-w7x6, MAL-2025-192448 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-sparkly-snowglobe-243 |
Malicious release: Malicious code in elf-stats-cosy-garland-592 (npm) GHSA-fp7c-3w5c-w2x8, MAL-2025-192441 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-cosy-garland-592 |
Malicious release: Malicious code in elf-stats-silvered-wishlist-243 (npm) GHSA-g328-49mp-9rv8, MAL-2025-192446 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-silvered-wishlist-243 |
Malicious release: Malicious code in elf-stats-snowy-toolkit-186 (npm) GHSA-h796-3gg3-mcgx, MAL-2025-192447 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-snowy-toolkit-186 |
Malicious release: Malicious code in asdfgh3 (npm) GHSA-jf55-h662-7w2j, MAL-2025-192439 | Malicious | Not scored | 11 Dec, 2025 | npm asdfgh3 |
Malicious release: Malicious code in elf-stats-candystriped-snowglobe-426 (npm) GHSA-mp3c-326j-96mw, MAL-2025-192440 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-candystriped-snowglobe-426 |
Malicious release: Malicious code in elf-stats-sugarplum-mitten-141 (npm) GHSA-pq84-52r2-cmvm, MAL-2025-192449 | Malicious | Not scored | 11 Dec, 2025 | npm elf-stats-sugarplum-mitten-141 |
Malicious release: Malicious code in libxmlfinal (npm) MAL-2025-192451 | Malicious | Not scored | 11 Dec, 2025 | npm libxmlfinal |
Malicious release: Malicious code in libxmlfinal3 (npm) MAL-2025-192452 | Malicious | Not scored | 11 Dec, 2025 | npm libxmlfinal3 |
Malicious release: Malicious code in libxmlfinal4 (npm) MAL-2025-192453 | Malicious | Not scored | 11 Dec, 2025 | npm libxmlfinal4 |
Malicious release: Malicious code in libxmlfinal5 (npm) MAL-2025-192454 | Malicious | Not scored | 11 Dec, 2025 | npm libxmlfinal5 |
Malicious release: Malicious code in libxmlhere (npm) MAL-2025-192455 | Malicious | Not scored | 11 Dec, 2025 | npm libxmlhere |
Malicious release: Malicious code in libxmljs10 (npm) MAL-2025-192456 | Malicious | Not scored | 11 Dec, 2025 | npm libxmljs10 |
Malicious release: Malicious code in libxmljs2var234 (npm) MAL-2025-192457 | Malicious | Not scored | 11 Dec, 2025 | npm libxmljs2var234 |
Malicious release: Malicious code in libxmljsololo (npm) MAL-2025-192458 | Malicious | Not scored | 11 Dec, 2025 | npm libxmljsololo |
Malicious release: Malicious code in libxmljsololo3 (npm) MAL-2025-192459 | Malicious | Not scored | 11 Dec, 2025 | npm libxmljsololo3 |
Malicious release: Malicious code in libxmljsololo4 (npm) MAL-2025-192460 | Malicious | Not scored | 11 Dec, 2025 | npm libxmljsololo4 |
Malicious release: Malicious code in libxmljsololos (npm) MAL-2025-192461 | Malicious | Not scored | 11 Dec, 2025 | npm libxmljsololos |
Malicious release: Malicious code in libxmlpupupu (npm) MAL-2025-192462 | Malicious | Not scored | 11 Dec, 2025 | npm libxmlpupupu |
Malicious release: Malicious code in libxmlussr (npm) MAL-2025-192463 | Malicious | Not scored | 11 Dec, 2025 | npm libxmlussr |
Malicious release: Malicious code in tnaxmlparserctf (npm) MAL-2025-192466 | Malicious | Not scored | 11 Dec, 2025 | npm tnaxmlparserctf |
Malicious release: Malicious code in gxzip (PyPI) MAL-2025-192467 | Malicious | Not scored | 10 Dec, 2025 | PyPI gxzip |
Malicious release: Malicious code in netbenchkit (PyPI) MAL-2025-192437 | Malicious | Not scored | 10 Dec, 2025 | PyPI netbenchkit |
Malicious release: Malicious code in synium (PyPI) MAL-2025-192438 | Malicious | Not scored | 10 Dec, 2025 | PyPI synium |
Malicious release: Malicious code in jsonschema-utf8 (PyPI) MAL-2025-192436 | Malicious | Not scored | 10 Dec, 2025 | PyPI jsonschema-utf8 |
Malicious release: Malicious code in loguru-utf8 (PyPI) MAL-2025-192435 | Malicious | Not scored | 10 Dec, 2025 | PyPI loguru-utf8 |
Malicious release: Malicious code in @cheqplease/structured-logger (npm) GHSA-x55c-jcjf-hj69, MAL-2025-192434 | Malicious | Not scored | 10 Dec, 2025 | npm @cheqplease/structured-logger |
Malicious release: Malicious code in mws-common-ui (npm) GHSA-wpw9-qh8w-2hv5, MAL-2025-192433 | Malicious | Not scored | 10 Dec, 2025 | npm mws-common-ui |
Malicious release: Malicious code in ctosec-appsec-wb-xray-adapters (PyPI) MAL-2025-192431 | Malicious | Not scored | 10 Dec, 2025 | PyPI ctosec-appsec-wb-xray-adapters |
Malicious release: Malicious code in kzip (PyPI) MAL-2025-192432 | Malicious | Not scored | 10 Dec, 2025 | PyPI kzip |