Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in boxy-wrapper-rspack-plugin (npm) MAL-2026-13098 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-wrapper-rspack-plugin |
Malicious release: Malicious code in bpm-foundation-analytics (npm) MAL-2026-13101 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-analytics |
Malicious release: Malicious code in boxy-wrapper-webpack-plugin (npm) MAL-2026-13099 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-wrapper-webpack-plugin |
Malicious release: Malicious code in bpm-foundation-bundle-optimization (npm) MAL-2026-13106 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-bundle-optimization |
Malicious release: Malicious code in bpm-foundation-common (npm) MAL-2026-13107 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-common |
Malicious release: Malicious code in bpm-foundation-app-configs (npm) MAL-2026-13103 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-app-configs |
Malicious release: Malicious code in bpm-foundation-delegate-docs (npm) MAL-2026-13109 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-delegate-docs |
Malicious release: Malicious code in bpm-foundation-date-range (npm) MAL-2026-13108 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-date-range |
Malicious release: Malicious code in bpm-foundation-storage (npm) MAL-2026-13119 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-storage |
Malicious release: Malicious code in bpm-foundation-feedback (npm) MAL-2026-13110 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-feedback |
Malicious release: Malicious code in bpm-foundation-sentry (npm) MAL-2026-13117 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-sentry |
Malicious release: Malicious code in bpm-foundation-linters (npm) MAL-2026-13112 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-linters |
Malicious release: Malicious code in bpm-foundation-tcs-configs (npm) MAL-2026-13120 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-tcs-configs |
Malicious release: Malicious code in bpm-foundation-nest-keycloak-connect (npm) MAL-2026-13113 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-nest-keycloak-connect |
Malicious release: Malicious code in bpm-foundation-rate-us (npm) MAL-2026-13115 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-rate-us |
Malicious release: Malicious code in bpm-foundation-husky (npm) MAL-2026-13111 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-husky |
Malicious release: Malicious code in bpm-foundation-oauth-client (npm) MAL-2026-13114 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-oauth-client |
Malicious release: Malicious code in bpm-foundation-renovate (npm) MAL-2026-13116 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-renovate |
Malicious release: Malicious code in bpm-foundation-statist-client (npm) MAL-2026-13118 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-statist-client |
Malicious release: Malicious code in bpm-foundation-test-jasmine (npm) MAL-2026-13121 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-test-jasmine |
Malicious release: Malicious code in bpm-ng-security (npm) MAL-2026-13122 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-ng-security |
Malicious release: Malicious code in bpm-foundation-test-jest (npm) MAL-2026-12515 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-test-jest |
Malicious release: Malicious code in cards-forms-clone-debit-clone (npm) MAL-2026-12526 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-clone-debit-clone |
Malicious release: Malicious code in cards-forms-credit-clone (npm) MAL-2026-12527 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-credit-clone |
Malicious release: Malicious code in capacity-capacity-core (npm) MAL-2026-12522 | Malicious | Not scored | 05 Aug, 2026 | npm capacity-capacity-core |
Malicious release: Malicious code in cards-forms-clone-cards-core-clone (npm) MAL-2026-12524 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-clone-cards-core-clone |
Malicious release: Malicious code in bpm-renovate-renovate-config (npm) MAL-2026-12517 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-renovate-renovate-config |
Malicious release: Malicious code in bpm-foundation-testing (npm) MAL-2026-12516 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-testing |
Malicious release: Malicious code in cards-forms-debit-clone (npm) MAL-2026-12528 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-debit-clone |
Malicious release: Malicious code in candy-candy-core (npm) MAL-2026-12521 | Malicious | Not scored | 05 Aug, 2026 | npm candy-candy-core |
Malicious release: Malicious code in bs-bs-core (npm) MAL-2026-12519 | Malicious | Not scored | 05 Aug, 2026 | npm bs-bs-core |
Malicious release: Malicious code in cards-forms-clone-credit-clone (npm) MAL-2026-12525 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-clone-credit-clone |
Malicious release: Malicious code in cards-forms-cards-core-clone (npm) MAL-2026-12523 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-cards-core-clone |
Malicious release: Malicious code in cardsmobile-rs-api (npm) MAL-2026-12535 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-rs-api |
Malicious release: Malicious code in caen-caen-core (npm) MAL-2026-12520 | Malicious | Not scored | 05 Aug, 2026 | npm caen-caen-core |
Malicious release: Malicious code in certificates-revocation-sw (npm) MAL-2026-12538 | Malicious | Not scored | 05 Aug, 2026 | npm certificates-revocation-sw |
Malicious release: Malicious code in cardsmobile-data-utils (npm) MAL-2026-12531 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-data-utils |
Malicious release: Malicious code in certificates-revocation-utils (npm) MAL-2026-12539 | Malicious | Not scored | 05 Aug, 2026 | npm certificates-revocation-utils |
Malicious release: Malicious code in cardsmobile-cardsmobile-core (npm) MAL-2026-12529 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-cardsmobile-core |
Malicious release: Malicious code in cardsmobile-http (npm) MAL-2026-12533 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-http |
Malicious release: Malicious code in cbp-exchange-government-cbp-exchange-government-core (npm) MAL-2026-12537 | Malicious | Not scored | 05 Aug, 2026 | npm cbp-exchange-government-cbp-exchange-government-core |
Malicious release: Malicious code in cardsmobile-storage (npm) MAL-2026-12536 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-storage |
Malicious release: Malicious code in cardsmobile-event-emitter (npm) MAL-2026-12532 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-event-emitter |
Malicious release: Malicious code in cardsmobile-notifications (npm) MAL-2026-12534 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-notifications |
Malicious release: Malicious code in cardsmobile-command-utils (npm) MAL-2026-12530 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-command-utils |
Malicious release: Malicious code in checkout-base-analytics-data (npm) MAL-2026-12543 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-base-analytics-data |
Malicious release: Malicious code in checkout-create-draft-agreement-am (npm) MAL-2026-12551 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-create-draft-agreement-am |
Malicious release: Malicious code in checkout-cashback-logic (npm) MAL-2026-12546 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-cashback-logic |
Malicious release: Malicious code in checkout-accounts-logic (npm) MAL-2026-12542 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-accounts-logic |
Malicious release: Malicious code in checkout-accounts-holder (npm) MAL-2026-12541 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-accounts-holder |