Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in sketchfab-spinner (PyPI) MAL-2025-192380 | Malicious | Not scored | 09 Dec, 2025 | PyPI sketchfab-spinner |
Malicious release: Malicious code in helloharry123p (PyPI) MAL-2025-192379 | Malicious | Not scored | 08 Dec, 2025 | PyPI helloharry123p |
Malicious release: Malicious code in shop-api-sdk (npm) MAL-2025-192378 | Malicious | Not scored | 08 Dec, 2025 | npm shop-api-sdk |
Malicious release: Malicious code in gs-uitk-lodash (npm) MAL-2025-192377 | Malicious | Not scored | 08 Dec, 2025 | npm gs-uitk-lodash |
Malicious release: Malicious code in graphnode (PyPI) MAL-2025-192376 | Malicious | Not scored | 08 Dec, 2025 | PyPI graphnode |
Malicious release: Malicious code in @notrainers/nobtrainer-sdk (npm) GHSA-49w9-gcx6-2wfh, MAL-2025-192373 | Malicious | Not scored | 08 Dec, 2025 | npm @notrainers/nobtrainer-sdk |
Malicious release: Malicious code in solana-dexco-basic (npm) GHSA-3377-9226-4w97, MAL-2025-192374 | Malicious | Not scored | 08 Dec, 2025 | npm solana-dexco-basic |
Malicious release: Malicious code in tensor-fi-utils-core (npm) GHSA-hjxg-jf6x-5vqp, MAL-2025-192375, SNYK-JS-TENSORFIUTILSCORE-14221996 | Malicious | Not scored | 08 Dec, 2025 | npm tensor-fi-utils-core |
Malicious release: Malicious code in paysera-checkout-modal (npm) MAL-2025-192368 | Malicious | Not scored | 07 Dec, 2025 | npm paysera-checkout-modal |
Malicious release: Malicious code in tna_xmlparser (npm) MAL-2025-192371 | Malicious | Not scored | 07 Dec, 2025 | npm tna_xmlparser |
Malicious release: Malicious code in hexdeci (PyPI) MAL-2025-192367 | Malicious | Not scored | 07 Dec, 2025 | PyPI hexdeci |
Malicious release: Malicious code in react-hook-form-5 (npm) MAL-2025-192366 | Malicious | Not scored | 07 Dec, 2025 | npm react-hook-form-5 |
Malicious release: Malicious code in python-tg-bot (PyPI) MAL-2025-192365 | Malicious | Not scored | 07 Dec, 2025 | PyPI python-tg-bot |
Malicious release: Malicious code in blank-lib (PyPI) MAL-2025-192364 | Malicious | Not scored | 07 Dec, 2025 | PyPI blank-lib |
Malicious release: Malicious code in datadog-checks-base (npm) GHSA-6gq4-p64c-9qqf, MAL-2025-192361 | Malicious | Not scored | 06 Dec, 2025 | npm datadog-checks-base |
Malicious release: Malicious code in evil-rce2 (PyPI) MAL-2025-192362 | Malicious | Not scored | 06 Dec, 2025 | PyPI evil-rce2 |
Malicious release: Malicious code in telco (PyPI) MAL-2025-192363 | Malicious | Not scored | 06 Dec, 2025 | PyPI telco |
Malicious release: Malicious code in fdir5 (npm) MAL-2025-192356 | Malicious | Not scored | 06 Dec, 2025 | npm fdir5 |
Malicious release: Malicious code in ssf-desktop-api-browser (npm) MAL-2025-192359 | Malicious | Not scored | 06 Dec, 2025 | npm ssf-desktop-api-browser |
Malicious release: Malicious code in enclose-eslint (npm) MAL-2025-192352 | Malicious | Not scored | 06 Dec, 2025 | npm enclose-eslint |
Malicious release: Malicious code in fdir1 (npm) MAL-2025-192353 | Malicious | Not scored | 06 Dec, 2025 | npm fdir1 |
Malicious release: Malicious code in ido-sdk-web (npm) MAL-2025-192357 | Malicious | Not scored | 06 Dec, 2025 | npm ido-sdk-web |
Malicious release: Malicious code in fdir4 (npm) MAL-2025-192355 | Malicious | Not scored | 06 Dec, 2025 | npm fdir4 |
Malicious release: Malicious code in sharp32 (npm) MAL-2025-192358 | Malicious | Not scored | 06 Dec, 2025 | npm sharp32 |
Malicious release: Malicious code in fdir2 (npm) MAL-2025-192354 | Malicious | Not scored | 06 Dec, 2025 | npm fdir2 |
Malicious release: Malicious code in ssf-desktop-api-openfin (npm) MAL-2025-192360 | Malicious | Not scored | 06 Dec, 2025 | npm ssf-desktop-api-openfin |
Malicious release: Malicious code in evil-rce (PyPI) MAL-2025-192351 | Malicious | Not scored | 06 Dec, 2025 | PyPI evil-rce |
Malicious release: Malicious code in express-my-error-handler (npm) GHSA-vf2p-5pcm-655m, MAL-2025-192350 | Malicious | Not scored | 06 Dec, 2025 | npm express-my-error-handler |
Malicious release: Malicious code in qt-main (PyPI) MAL-2025-192349 | Malicious | Not scored | 05 Dec, 2025 | PyPI qt-main |
Malicious release: Malicious code in native-component-list (npm) GHSA-857j-xfpm-cxrp, MAL-2025-192345 | Malicious | Not scored | 05 Dec, 2025 | npm native-component-list |
Malicious release: Malicious code in non-modular-buildable (npm) GHSA-wj95-4qrc-6r3h, MAL-2025-192346 | Malicious | Not scored | 05 Dec, 2025 | npm non-modular-buildable |
Malicious release: Malicious code in ambient-map (npm) MAL-2025-192324 | Malicious | Not scored | 05 Dec, 2025 | npm ambient-map |
Malicious release: Malicious code in elf-stats-aurora-mailbag-938 (npm) MAL-2025-192325 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-aurora-mailbag-938 |
Malicious release: Malicious code in elf-stats-candlelit-hollyberry-248 (npm) MAL-2025-192326 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-candlelit-hollyberry-248 |
Malicious release: Malicious code in elf-stats-candystriped-garland-735 (npm) MAL-2025-192327 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-candystriped-garland-735 |
Malicious release: Malicious code in elf-stats-cosy-sled-550 (npm) MAL-2025-192328 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-cosy-sled-550 |
Malicious release: Malicious code in elf-stats-cosy-toy-308 (npm) MAL-2025-192329 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-cosy-toy-308 |
Malicious release: Malicious code in elf-stats-cranberry-pinecone-878 (npm) MAL-2025-192330 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-cranberry-pinecone-878 |
Malicious release: Malicious code in elf-stats-evergreen-satchel-264 (npm) MAL-2025-192331 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-evergreen-satchel-264 |
Malicious release: Malicious code in elf-stats-flickering-lantern-502 (npm) MAL-2025-192332 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-flickering-lantern-502 |
Malicious release: Malicious code in elf-stats-lanternlit-saddlebag-279 (npm) MAL-2025-192333 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-lanternlit-saddlebag-279 |
Malicious release: Malicious code in elf-stats-midnight-rocket-813 (npm) MAL-2025-192334 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-midnight-rocket-813 |
Malicious release: Malicious code in elf-stats-mulled-snowglobe-636 (npm) MAL-2025-192335 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-mulled-snowglobe-636 |
Malicious release: Malicious code in elf-stats-northbound-drum-422 (npm) MAL-2025-192336 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-northbound-drum-422 |
Malicious release: Malicious code in elf-stats-shimmering-garland-476 (npm) MAL-2025-192337 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-shimmering-garland-476 |
Malicious release: Malicious code in elf-stats-shimmering-toolkit-483 (npm) MAL-2025-192338 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-shimmering-toolkit-483 |
Malicious release: Malicious code in elf-stats-snowdusted-chimney-406 (npm) MAL-2025-192339 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-snowdusted-chimney-406 |
Malicious release: Malicious code in elf-stats-sparkly-icicle-845 (npm) MAL-2025-192340 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-sparkly-icicle-845 |
Malicious release: Malicious code in elf-stats-sparkly-workbench-689 (npm) MAL-2025-192341 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-sparkly-workbench-689 |
Malicious release: Malicious code in elf-stats-tinsel-muffin-395 (npm) MAL-2025-192342 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-tinsel-muffin-395 |