Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in bnpl-blocks-mobile-bnpl-reviews (npm) MAL-2026-13003 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-mobile-bnpl-reviews |
Malicious release: Malicious code in bnpl-blocks-mobile-bnpl-partners (npm) MAL-2026-13000 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-mobile-bnpl-partners |
Malicious release: Malicious code in bnpl-blocks-mobile-bnpl-popup (npm) MAL-2026-13002 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-mobile-bnpl-popup |
Malicious release: Malicious code in bnpl-blocks-mobile-bnpl-tab-buttons (npm) MAL-2026-13007 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-mobile-bnpl-tab-buttons |
Malicious release: Malicious code in bnpl-blocks-seo-tools (npm) MAL-2026-13016 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-seo-tools |
Ghost: Server-Side Request Forgery Mitigation Issue BIT-ghost-2026-70595, CVE-2026-70595, GHSA-x5mm-wm4g-j5xv | Medium | 0.3% | 05 Aug, 2026 | npm ghost |
Malicious release: Malicious code in bnpl-blocks-sanitizer (npm) MAL-2026-13014 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-sanitizer |
Malicious release: Malicious code in bnpl-blocks-post-css (npm) MAL-2026-13013 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-post-css |
Malicious release: Malicious code in bnpl-blocks-mobile-bnpl-title (npm) MAL-2026-13010 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-mobile-bnpl-title |
Malicious release: Malicious code in bnpl-blocks-playwright (npm) MAL-2026-13012 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-playwright |
Malicious release: Malicious code in bnpl-blocks-scroll (npm) MAL-2026-13015 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-scroll |
Malicious release: Malicious code in bnpl-blocks-mobile-bnpl-shopping-header (npm) MAL-2026-13006 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-mobile-bnpl-shopping-header |
Malicious release: Malicious code in bnpl-blocks-mobile-large-bnpl-reviews (npm) MAL-2026-13011 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-mobile-large-bnpl-reviews |
Malicious release: Malicious code in bnpl-blocks-mobile-bnpl-text-block (npm) MAL-2026-13009 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-mobile-bnpl-text-block |
Malicious release: Malicious code in bnpl-blocks-shops-api (npm) MAL-2026-13017 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-shops-api |
Malicious release: Malicious code in bnpl-blocks-stories-of-block (npm) MAL-2026-13019 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-stories-of-block |
Malicious release: Malicious code in bnpl-blocks-stories (npm) MAL-2026-13018 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-stories |
Malicious release: Malicious code in bnpl-blocks-mobile-bnpl-table (npm) MAL-2026-13008 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-mobile-bnpl-table |
Malicious release: Malicious code in bnpl-molecule-mobile-bnpl-onboarding (npm) MAL-2026-13025 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-molecule-mobile-bnpl-onboarding |
Malicious release: Malicious code in boxy-add-script (npm) MAL-2026-13030 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-add-script |
Malicious release: Malicious code in boxy-constants (npm) MAL-2026-13033 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-constants |
Malicious release: Malicious code in bnpl-blocks-utils (npm) MAL-2026-13022 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-utils |
Malicious release: Malicious code in book-collect (npm) MAL-2026-13027 | Malicious | Not scored | 05 Aug, 2026 | npm book-collect |
Malicious release: Malicious code in boxy-bus-providers (npm) MAL-2026-13031 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-bus-providers |
Malicious release: Malicious code in boxy-client-loader (npm) MAL-2026-13032 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-client-loader |
Malicious release: Malicious code in boxy-contract (npm) MAL-2026-13034 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-contract |
Malicious release: Malicious code in boxy-add-link (npm) MAL-2026-13029 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-add-link |
Malicious release: Malicious code in bnpl-core (npm) MAL-2026-13023 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-core |
Malicious release: Malicious code in boxy-adapter-tramvai (npm) MAL-2026-13028 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-adapter-tramvai |
Malicious release: Malicious code in bnpl-blocks-types (npm) MAL-2026-13020 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-types |
Malicious release: Malicious code in bnpl-forms-test-utils (npm) MAL-2026-13024 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-forms-test-utils |
Malicious release: Malicious code in bnpl-blocks-types-gen (npm) MAL-2026-13021 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-types-gen |
Malicious release: Malicious code in boxy-docusaurus-plugin-content-docs-light (npm) MAL-2026-13041 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-docusaurus-plugin-content-docs-light |
Malicious release: Malicious code in bnpl-molecule-mobile-bnpl-selector (npm) MAL-2026-13026 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-molecule-mobile-bnpl-selector |
Malicious release: Malicious code in boxy-cook (npm) MAL-2026-13035 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-cook |
Malicious release: Malicious code in boxy-expander-contract (npm) MAL-2026-13043 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-expander-contract |
Malicious release: Malicious code in boxy-devtools-tokens (npm) MAL-2026-13040 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-devtools-tokens |
Malicious release: Malicious code in boxy-devtools (npm) MAL-2026-13039 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-devtools |
Malicious release: Malicious code in boxy-fixture-sb (npm) MAL-2026-13048 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-sb |
Malicious release: Malicious code in boxy-debugger (npm) MAL-2026-13036 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-debugger |
Malicious release: Malicious code in boxy-demo-tokens (npm) MAL-2026-13037 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-demo-tokens |
Malicious release: Malicious code in boxy-esm-shims (npm) MAL-2026-13042 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-esm-shims |
Malicious release: Malicious code in boxy-deps-calculator (npm) MAL-2026-13038 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-deps-calculator |
Malicious release: Malicious code in boxy-fixture-pendel (npm) MAL-2026-13046 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-pendel |
Malicious release: Malicious code in boxy-fixture (npm) MAL-2026-13044 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture |
Malicious release: Malicious code in boxy-fixture-paperclip (npm) MAL-2026-13045 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-paperclip |
Malicious release: Malicious code in boxy-maker-extendable-minihost (npm) MAL-2026-13059 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-extendable-minihost |
Malicious release: Malicious code in boxy-fixture-pfa (npm) MAL-2026-13047 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-pfa |
Malicious release: Malicious code in boxy-get-retry-url (npm) MAL-2026-13049 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-get-retry-url |
Malicious release: Malicious code in boxy-maker-page-readiness (npm) MAL-2026-13061 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-page-readiness |