Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dolyame-ui-cardlogo (npm) MAL-2026-13555 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-cardlogo |
Malicious release: Malicious code in platform-ui-colors (npm) MAL-2026-13603 | Malicious | Not scored | 07 Aug, 2026 | npm platform-ui-colors |
Malicious release: Malicious code in dolyame-ui-sortablelist (npm) MAL-2026-13599 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-sortablelist |
Malicious release: Malicious code in dolyame-ui-contextmenu (npm) MAL-2026-13561 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-contextmenu |
Malicious release: Malicious code in dolyame-ui-focusstatehoc (npm) MAL-2026-13570 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-focusstatehoc |
Malicious release: Malicious code in dolyame-ui-carouselline (npm) MAL-2026-13556 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-carouselline |
Malicious release: Malicious code in ded-pwa-c-boxy (npm) MAL-2026-13533 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-c-boxy |
Malicious release: Malicious code in dolyame-ui-iconspack (npm) MAL-2026-13572 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-iconspack |
Malicious release: Malicious code in dolyame-ui-postcssconfig (npm) MAL-2026-13594 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-postcssconfig |
Malicious release: Malicious code in tailwindcss-motion-advanced (npm) MAL-2026-13604 | Malicious | Not scored | 07 Aug, 2026 | npm tailwindcss-motion-advanced |
Malicious release: Malicious code in dolyame-ui-flatcorners (npm) MAL-2026-13569 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-flatcorners |
Malicious release: Malicious code in dolyame-ui-pageheader (npm) MAL-2026-13592 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-pageheader |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-product-grid (npm) MAL-2026-13553 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-boxy-independent-bnpl-product-grid |
Malicious release: Malicious code in damir-cbr-dawdntrnssbf (npm) MAL-2026-13531 | Malicious | Not scored | 07 Aug, 2026 | npm damir-cbr-dawdntrnssbf |
Malicious release: Malicious code in dolyame-ui-mediainfohoc (npm) MAL-2026-13588 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-mediainfohoc |
Malicious release: Malicious code in dolyame-ui-inputrange (npm) MAL-2026-13581 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputrange |
Malicious release: Malicious code in dolyame-ui-dataqa (npm) MAL-2026-13564 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-dataqa |
Malicious release: Malicious code in devplatform-spa-plugin-feature-toggle (npm) MAL-2026-13546 | Malicious | Not scored | 07 Aug, 2026 | npm devplatform-spa-plugin-feature-toggle |
Malicious release: Malicious code in dolyame-ui-eventoutside (npm) MAL-2026-13568 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-eventoutside |
Malicious release: Malicious code in devplatform-api-v1-resources (npm) MAL-2026-13543 | Malicious | Not scored | 07 Aug, 2026 | npm devplatform-api-v1-resources |
Malicious release: Malicious code in delivery-ci-cli (npm) MAL-2026-13538 | Malicious | Not scored | 07 Aug, 2026 | npm delivery-ci-cli |
Malicious release: Malicious code in @rbxst/services (npm) MAL-2026-13521 | Malicious | Not scored | 07 Aug, 2026 | npm @rbxst/services |
Malicious release: Malicious code in devplatform-spa-errors (npm) MAL-2026-13545 | Malicious | Not scored | 07 Aug, 2026 | npm devplatform-spa-errors |
Malicious release: Malicious code in bnpl-blocks-atom-bnpl-checkbox (npm) MAL-2026-13527 | Malicious | Not scored | 07 Aug, 2026 | npm bnpl-blocks-atom-bnpl-checkbox |
Malicious release: Malicious code in bigops-abstract-entity-data (npm) MAL-2026-13524 | Malicious | Not scored | 07 Aug, 2026 | npm bigops-abstract-entity-data |
Malicious release: Malicious code in dolyame-ui-buttonstore (npm) MAL-2026-13554 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-buttonstore |
Malicious release: Malicious code in dolyame-ui-memoizeweak (npm) MAL-2026-13589 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-memoizeweak |
Malicious release: Malicious code in dolyame-ui-inputtime (npm) MAL-2026-13586 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputtime |
Malicious release: Malicious code in ded-pwa-test-pub-pkg (npm) MAL-2026-13537 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-test-pub-pkg |
Malicious release: Malicious code in dolyame-ui-tabslayout (npm) MAL-2026-13602 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-tabslayout |
Malicious release: Malicious code in dolyame-ui-inlineedit (npm) MAL-2026-13573 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inlineedit |
Malicious release: Malicious code in dolyame-ui-tableinline (npm) MAL-2026-13600 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-tableinline |
Malicious release: Malicious code in delivery-ci-documentation (npm) MAL-2026-13541 | Malicious | Not scored | 07 Aug, 2026 | npm delivery-ci-documentation |
Malicious release: Malicious code in dolyame-ui-popupcarousel (npm) MAL-2026-13593 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-popupcarousel |
Malicious release: Malicious code in dolyame-ui-overridestyles (npm) MAL-2026-13591 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-overridestyles |
Malicious release: Malicious code in devplatform-eslint-config (npm) MAL-2026-13544 | Malicious | Not scored | 07 Aug, 2026 | npm devplatform-eslint-config |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-navigation-arrow (npm) MAL-2026-13550 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-boxy-atom-bnpl-navigation-arrow |
Malicious release: Malicious code in dolyame-ui-inputmoney (npm) MAL-2026-13579 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputmoney |
Malicious release: Malicious code in ded-pwa-c-micro (npm) MAL-2026-13536 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-c-micro |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-faq (npm) MAL-2026-13551 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-boxy-independent-bnpl-faq |
Malicious release: Malicious code in dolyame-ui-draghoc (npm) MAL-2026-13567 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-draghoc |
Malicious release: Malicious code in dolyame-ui-contenteditable (npm) MAL-2026-13560 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-contenteditable |
Malicious release: Malicious code in dolyame-ui-noindex (npm) MAL-2026-13590 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-noindex |
Malicious release: Malicious code in dolyame-ui-inputcard (npm) MAL-2026-13575 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputcard |
Malicious release: Malicious code in bigops-security (npm) MAL-2026-13525 | Malicious | Not scored | 07 Aug, 2026 | npm bigops-security |
Malicious release: Malicious code in bnpl-blocks-atom-bnpl-image-card (npm) MAL-2026-13529 | Malicious | Not scored | 07 Aug, 2026 | npm bnpl-blocks-atom-bnpl-image-card |
Malicious release: Malicious code in dolyame-ui-selectaccount (npm) MAL-2026-13598 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-selectaccount |
Malicious release: Malicious code in dolyame-ui-clickoutsidehoc (npm) MAL-2026-13558 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-clickoutsidehoc |
Malicious release: Malicious code in dolyame-ui-generateid (npm) MAL-2026-13571 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-generateid |
Malicious release: Malicious code in bnpl-blocks-atom-bnpl-loader (npm) MAL-2026-13530 | Malicious | Not scored | 07 Aug, 2026 | npm bnpl-blocks-atom-bnpl-loader |