Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @depup/astro (npm) MAL-2026-13622 | Malicious | Not scored | 07 Aug, 2026 | npm @depup/astro |
Malicious release: Malicious code in @depup/aws-sdk__credential-provider-process (npm) MAL-2026-13623 | Malicious | Not scored | 07 Aug, 2026 | npm @depup/aws-sdk__credential-provider-process |
Malicious release: Malicious code in @decido/backend-core (npm) MAL-2026-13621 | Malicious | Not scored | 07 Aug, 2026 | npm @decido/backend-core |
Malicious release: Malicious code in @lambda-platform/lambda-vue (npm) GHSA-jm85-g3fj-922w, MAL-2026-13668 | Malicious | Not scored | 07 Aug, 2026 | npm @lambda-platform/lambda-vue |
Malicious release: Malicious code in @catamania/front-components (npm) MAL-2026-13620 | Malicious | Not scored | 07 Aug, 2026 | npm @catamania/front-components |
Malicious release: Malicious code in aclade-agent (npm) MAL-2026-13614 | Malicious | Not scored | 07 Aug, 2026 | npm aclade-agent |
Malicious release: Malicious code in w-screenctl (npm) MAL-2026-13618 | Malicious | Not scored | 07 Aug, 2026 | npm w-screenctl |
Malicious release: Malicious code in agenthub-ai (npm) MAL-2026-13615 | Malicious | Not scored | 07 Aug, 2026 | npm agenthub-ai |
Malicious release: Malicious code in ts-utility-plus (npm) MAL-2026-13617 | Malicious | Not scored | 07 Aug, 2026 | npm ts-utility-plus |
Malicious release: Malicious code in hardhat-cap (npm) GHSA-3jrx-49jf-x2rp, MAL-2026-13616 | Malicious | Not scored | 07 Aug, 2026 | npm hardhat-cap |
Malicious release: Malicious code in big-tss (npm) MAL-2026-13613 | Malicious | Not scored | 07 Aug, 2026 | npm big-tss |
Malicious release: Malicious code in mangomind-agent (npm) MAL-2026-13611 | Malicious | Not scored | 07 Aug, 2026 | npm mangomind-agent |
Malicious release: Malicious code in transform-es2015-unicode-regex (npm) GHSA-fmrp-cpm8-5245, GHSA-jcxm-5v55-599q, MAL-2026-13612, SNYK-JS-DEPUPAWSSDKCREDENTIALPROVIDERPROCESS-18584483 | Malicious | Not scored | 07 Aug, 2026 | npm transform-es2015-unicode-regex |
Malicious release: Malicious code in f-termx (npm) MAL-2026-13610 | Malicious | Not scored | 07 Aug, 2026 | npm f-termx |
Malicious release: Malicious code in hardhat-set (npm) MAL-2026-13609 | Malicious | Not scored | 07 Aug, 2026 | npm hardhat-set |
Malicious release: Malicious code in @vertexa/prisma-fetch-engine (npm) MAL-2026-13608 | Malicious | Not scored | 07 Aug, 2026 | npm @vertexa/prisma-fetch-engine |
Malicious release: Malicious code in yakuza0 (npm) MAL-2026-13605 | Malicious | Not scored | 07 Aug, 2026 | npm yakuza0 |
Malicious release: Malicious code in @aster110/cc2wechat (npm) MAL-2026-13520 | Malicious | Not scored | 07 Aug, 2026 | npm @aster110/cc2wechat |
Malicious release: Malicious code in dojo-rn-interview (npm) GHSA-7phf-cqrv-j3jg, MAL-2026-13549 | Malicious | Not scored | 07 Aug, 2026 | npm dojo-rn-interview |
Malicious release: Malicious code in delivery-ci-codeceptjs (npm) MAL-2026-13539 | Malicious | Not scored | 07 Aug, 2026 | npm delivery-ci-codeceptjs |
Malicious release: Malicious code in dolyame-ui-inputautocomplete (npm) MAL-2026-13574 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputautocomplete |
Malicious release: Malicious code in devplatform-spa-plugin-remote-module (npm) MAL-2026-13547 | Malicious | Not scored | 07 Aug, 2026 | npm devplatform-spa-plugin-remote-module |
Malicious release: Malicious code in dolyame-ui-checkablegroup (npm) MAL-2026-13557 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-checkablegroup |
Malicious release: Malicious code in dolyame-ui-inputdate (npm) MAL-2026-13577 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputdate |
Malicious release: Malicious code in delivery-ci-jira (npm) MAL-2026-13542 | Malicious | Not scored | 07 Aug, 2026 | npm delivery-ci-jira |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-main-title (npm) MAL-2026-13552 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-boxy-independent-bnpl-main-title |
Malicious release: Malicious code in dolyame-ui-progressline (npm) MAL-2026-13596 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-progressline |
Malicious release: Malicious code in dolyame-ui-inputsearchtagged (npm) MAL-2026-13583 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputsearchtagged |
Malicious release: Malicious code in dolyame-ui-deprecatepropshoc (npm) MAL-2026-13566 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-deprecatepropshoc |
Malicious release: Malicious code in dolyame-ui-inputcount (npm) MAL-2026-13576 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputcount |
Malicious release: Malicious code in dolyame-ui-datatable (npm) MAL-2026-13565 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-datatable |
Malicious release: Malicious code in bigops-shared-product-design (npm) MAL-2026-13526 | Malicious | Not scored | 07 Aug, 2026 | npm bigops-shared-product-design |
Malicious release: Malicious code in dolyame-ui-inputtag (npm) MAL-2026-13585 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputtag |
Malicious release: Malicious code in dolyame-ui-tablemobile (npm) MAL-2026-13601 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-tablemobile |
Malicious release: Malicious code in dolyame-ui-collapseblock (npm) MAL-2026-13559 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-collapseblock |
Malicious release: Malicious code in dolyame-ui-contextmenusearchable (npm) MAL-2026-13562 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-contextmenusearchable |
Malicious release: Malicious code in dolyame-ui-inputsearch (npm) MAL-2026-13582 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputsearch |
Malicious release: Malicious code in devplatform-stylelint-config (npm) MAL-2026-13548 | Malicious | Not scored | 07 Aug, 2026 | npm devplatform-stylelint-config |
Malicious release: Malicious code in dolyame-ui-postcsscustomproperties (npm) MAL-2026-13595 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-postcsscustomproperties |
Malicious release: Malicious code in dolyame-ui-inputsecure (npm) MAL-2026-13584 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputsecure |
Malicious release: Malicious code in delivery-ci-core (npm) MAL-2026-13540 | Malicious | Not scored | 07 Aug, 2026 | npm delivery-ci-core |
Malicious release: Malicious code in dolyame-ui-scrollblock (npm) MAL-2026-13597 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-scrollblock |
Malicious release: Malicious code in bnpl-blocks-atom-bnpl-faq-item (npm) MAL-2026-13528 | Malicious | Not scored | 07 Aug, 2026 | npm bnpl-blocks-atom-bnpl-faq-item |
Malicious release: Malicious code in ded-pwa-bnpl-forms-test-demo (npm) MAL-2026-13532 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-bnpl-forms-test-demo |
Malicious release: Malicious code in ded-pwa-c-mapping (npm) MAL-2026-13535 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-c-mapping |
Malicious release: Malicious code in dolyame-ui-inputfio (npm) MAL-2026-13578 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputfio |
Malicious release: Malicious code in ded-pwa-c-boxy-di (npm) MAL-2026-13534 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-c-boxy-di |
Malicious release: Malicious code in dolyame-ui-controlgroup (npm) MAL-2026-13563 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-controlgroup |
Malicious release: Malicious code in dolyame-ui-inputphone (npm) MAL-2026-13580 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputphone |
Malicious release: Malicious code in beaver-ui-popover-marker (npm) MAL-2026-13523 | Malicious | Not scored | 07 Aug, 2026 | npm beaver-ui-popover-marker |