Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-search (npm) GHSA-c6jq-gq46-43jj, MAL-2026-13328 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-search |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-title (npm) MAL-2026-13334 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-title |
Malicious release: Malicious code in dolyame-boxy-mobile-bnpl-header (npm) MAL-2026-13341 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-mobile-bnpl-header |
Electron: Parent process code-sign check is spoofable CVE-2026-70597, GHSA-jm7p-cc5g-qwxx | Medium | 0.1% | 05 Aug, 2026 | npm electron |
Malicious release: Malicious code in dolyame-boxy-markdown (npm) MAL-2026-13336 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-markdown |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-scheme (npm) GHSA-4c3q-jjpc-xjwp, MAL-2026-13327 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-scheme |
Malicious release: Malicious code in dolyame-boxy-mobile-bnpl-card-panel (npm) MAL-2026-13339 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-mobile-bnpl-card-panel |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-swagger (npm) MAL-2026-13330 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-swagger |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-video (npm) MAL-2026-13335 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-video |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-table (npm) MAL-2026-13331 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-table |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-tiles (npm) MAL-2026-13333 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-tiles |
Malicious release: Malicious code in dolyame-boxy-mobile-bnpl-card-gallery (npm) MAL-2026-13338 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-mobile-bnpl-card-gallery |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-separator (npm) MAL-2026-13329 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-separator |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-text-block (npm) MAL-2026-13332 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-text-block |
Malicious release: Malicious code in dolyame-boxy-mobile-bnpl-button-set (npm) MAL-2026-13337 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-mobile-bnpl-button-set |
Malicious release: Malicious code in dolyame-boxy-mobile-bnpl-footer (npm) MAL-2026-13340 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-mobile-bnpl-footer |
Malicious release: Malicious code in dolyame-boxy-mobile-bnpl-picture-gallery (npm) MAL-2026-13126 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-mobile-bnpl-picture-gallery |
Malicious release: Malicious code in dolyame-boxy-mobile-bnpl-image-plus-text (npm) MAL-2026-13125 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-mobile-bnpl-image-plus-text |
Malicious release: Malicious code in dolyame-boxy-mobile-bnpl-popup (npm) MAL-2026-13127 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-mobile-bnpl-popup |
Malicious release: Malicious code in dolyame-ui-badge (npm) MAL-2026-13136 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-badge |
Malicious release: Malicious code in dolyame-ui-breadcrumbs (npm) MAL-2026-13138 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-breadcrumbs |
Malicious release: Malicious code in dolyame-boxy-scroll (npm) MAL-2026-13130 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-scroll |
Malicious release: Malicious code in dolyame-ui-block (npm) MAL-2026-13137 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-block |
Malicious release: Malicious code in dolyame-ui-avatar (npm) MAL-2026-13135 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-avatar |
Malicious release: Malicious code in dolyame-ui-accordion (npm) MAL-2026-13133 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-accordion |
Malicious release: Malicious code in dolyame-boxy-stories (npm) MAL-2026-13131 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-stories |
Malicious release: Malicious code in dolyame-boxy-mobile-bnpl-title (npm) MAL-2026-13129 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-mobile-bnpl-title |
Malicious release: Malicious code in dolyame-boxy-stories-of-block (npm) MAL-2026-13132 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-stories-of-block |
Malicious release: Malicious code in dolyame-boxy-mobile-bnpl-text-block (npm) MAL-2026-13128 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-mobile-bnpl-text-block |
Malicious release: Malicious code in dolyame-ui-action (npm) MAL-2026-13134 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-action |
Malicious release: Malicious code in ded-aa-liza-ded-aa-liza-core (npm) MAL-2026-13124 | Malicious | Not scored | 05 Aug, 2026 | npm ded-aa-liza-ded-aa-liza-core |
Malicious release: Malicious code in ded-aa-common-ded-aa-common-core (npm) MAL-2026-13123 | Malicious | Not scored | 05 Aug, 2026 | npm ded-aa-common-ded-aa-common-core |
Malicious release: Malicious code in dolyame-ui-carousel (npm) MAL-2026-13141 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-carousel |
Malicious release: Malicious code in dolyame-ui-codemods (npm) MAL-2026-13146 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-codemods |
Malicious release: Malicious code in dolyame-ui-container (npm) MAL-2026-13150 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-container |
Malicious release: Malicious code in dolyame-ui-colors (npm) MAL-2026-13147 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-colors |
Malicious release: Malicious code in dolyame-ui-button (npm) MAL-2026-13139 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-button |
Malicious release: Malicious code in dolyame-ui-chart (npm) MAL-2026-13142 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-chart |
Malicious release: Malicious code in dolyame-ui-checkbox (npm) MAL-2026-13144 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-checkbox |
Malicious release: Malicious code in dolyame-ui-constants (npm) MAL-2026-13149 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-constants |
Malicious release: Malicious code in dolyame-ui-checkable (npm) MAL-2026-13143 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-checkable |
Malicious release: Malicious code in dolyame-ui-calendar (npm) MAL-2026-13140 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-calendar |
Malicious release: Malicious code in dolyame-ui-clickable (npm) MAL-2026-13145 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-clickable |
Malicious release: Malicious code in dolyame-ui-confirmation (npm) MAL-2026-13148 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-confirmation |
Malicious release: Malicious code in dolyame-ui-editor (npm) MAL-2026-13153 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-editor |
Malicious release: Malicious code in dolyame-ui-draggable (npm) MAL-2026-13151 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-draggable |
Malicious release: Malicious code in dolyame-ui-footer (npm) MAL-2026-13156 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-footer |
Malicious release: Malicious code in dolyame-ui-filter (npm) MAL-2026-13154 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-filter |
Malicious release: Malicious code in dolyame-ui-flag (npm) MAL-2026-13155 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-flag |
Malicious release: Malicious code in dolyame-ui-grid (npm) MAL-2026-13157 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-grid |