Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in boxy-lcd (npm) MAL-2026-13052 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-lcd |
Malicious release: Malicious code in boxy-live (npm) MAL-2026-13054 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-live |
Malicious release: Malicious code in boxy-maker (npm) MAL-2026-13057 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker |
Malicious release: Malicious code in boxy-lazy-loader (npm) MAL-2026-13051 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-lazy-loader |
Malicious release: Malicious code in boxy-loader (npm) MAL-2026-13055 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-loader |
Malicious release: Malicious code in boxy-maker-readiness (npm) MAL-2026-13062 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-readiness |
Malicious release: Malicious code in boxy-legacy-providers (npm) MAL-2026-13053 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-legacy-providers |
Malicious release: Malicious code in boxy-maker-legacy (npm) MAL-2026-13060 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-legacy |
Malicious release: Malicious code in boxy-make-tokens-map (npm) MAL-2026-13056 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-make-tokens-map |
Malicious release: Malicious code in boxy-global-modules-webpack-plugin (npm) MAL-2026-13050 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-global-modules-webpack-plugin |
Malicious release: Malicious code in boxy-maker-bus (npm) MAL-2026-13058 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-bus |
Malicious release: Malicious code in boxy-maker-sticky (npm) MAL-2026-13065 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-sticky |
Malicious release: Malicious code in boxy-maker-skeleton (npm) MAL-2026-13064 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-skeleton |
Malicious release: Malicious code in boxy-micro-story (npm) MAL-2026-13067 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-micro-story |
Malicious release: Malicious code in boxy-maker-scroll (npm) MAL-2026-13063 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-scroll |
Malicious release: Malicious code in boxy-mif-tokens (npm) MAL-2026-13068 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mif-tokens |
Malicious release: Malicious code in boxy-render-unwrap (npm) MAL-2026-13077 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-render-unwrap |
Malicious release: Malicious code in boxy-mops (npm) MAL-2026-13073 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mops |
Malicious release: Malicious code in boxy-maker-wave (npm) MAL-2026-13066 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-wave |
Malicious release: Malicious code in boxy-mm-advisor (npm) MAL-2026-13069 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mm-advisor |
Malicious release: Malicious code in boxy-mm-server-loader (npm) MAL-2026-13070 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mm-server-loader |
Malicious release: Malicious code in boxy-page-story (npm) MAL-2026-13074 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-page-story |
Malicious release: Malicious code in boxy-sticky-providers (npm) MAL-2026-13084 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-sticky-providers |
Malicious release: Malicious code in boxy-mmb-deps-pvm-plugin (npm) MAL-2026-13071 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mmb-deps-pvm-plugin |
Malicious release: Malicious code in boxy-pkg-deps-hash (npm) MAL-2026-13075 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-pkg-deps-hash |
Malicious release: Malicious code in boxy-mmb-types (npm) MAL-2026-13072 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mmb-types |
Malicious release: Malicious code in boxy-test-maker (npm) MAL-2026-13091 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-maker |
Malicious release: Malicious code in boxy-pkg-path (npm) MAL-2026-13076 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-pkg-path |
Malicious release: Malicious code in boxy-scroll-providers (npm) MAL-2026-13079 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-scroll-providers |
Malicious release: Malicious code in boxy-search-workspace-substrings (npm) MAL-2026-13080 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-search-workspace-substrings |
Malicious release: Malicious code in boxy-test-block-fixture (npm) MAL-2026-13089 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-block-fixture |
Malicious release: Malicious code in boxy-tokens (npm) MAL-2026-13092 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-tokens |
Malicious release: Malicious code in boxy-sitree (npm) MAL-2026-13083 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-sitree |
Malicious release: Malicious code in boxy-rspack-optimize-sharing-runtime (npm) MAL-2026-13078 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-rspack-optimize-sharing-runtime |
Malicious release: Malicious code in boxy-test-host (npm) MAL-2026-13090 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-host |
Malicious release: Malicious code in boxy-temper (npm) MAL-2026-13087 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-temper |
Malicious release: Malicious code in boxy-service (npm) MAL-2026-13082 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-service |
Malicious release: Malicious code in boxy-test-block (npm) MAL-2026-13088 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-block |
Malicious release: Malicious code in boxy-validate-implicit-deps (npm) MAL-2026-13096 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-validate-implicit-deps |
Malicious release: Malicious code in boxy-semver (npm) MAL-2026-13081 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-semver |
Malicious release: Malicious code in boxy-tree-providers (npm) MAL-2026-13093 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-tree-providers |
Malicious release: Malicious code in bpm-foundation-auth (npm) MAL-2026-13104 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-auth |
Malicious release: Malicious code in boxy-storybook-addon-changelog (npm) MAL-2026-13086 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-storybook-addon-changelog |
Malicious release: Malicious code in boxy-story-header (npm) MAL-2026-13085 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-story-header |
Malicious release: Malicious code in boxy-use-what-changed (npm) MAL-2026-13095 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-use-what-changed |
Malicious release: Malicious code in bpm-foundation-ai-assistant (npm) MAL-2026-13100 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-ai-assistant |
Malicious release: Malicious code in bpm-foundation-base-configs (npm) MAL-2026-13105 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-base-configs |
Malicious release: Malicious code in bpm-foundation-api (npm) MAL-2026-13102 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-api |
Malicious release: Malicious code in boxy-use-calls (npm) MAL-2026-13094 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-use-calls |
Malicious release: Malicious code in boxy-webpack-test-utils (npm) MAL-2026-13097 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-webpack-test-utils |