Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in bigops-products-loans (npm) MAL-2026-13242 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-loans |
Malicious release: Malicious code in bigops-products-travel (npm) MAL-2026-13247 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-travel |
Malicious release: Malicious code in bigops-status-selection (npm) GHSA-r2qr-xq83-5p7q, MAL-2026-13251 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-status-selection |
Malicious release: Malicious code in bigops-statements-timeline (npm) GHSA-mrfg-393h-v67j, MAL-2026-13250 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-statements-timeline |
Malicious release: Malicious code in bigops-rx-post-message (npm) MAL-2026-13248 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-rx-post-message |
Malicious release: Malicious code in bigops-storio (npm) GHSA-g548-9c3x-q2r5, MAL-2026-13252 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-storio |
Malicious release: Malicious code in bigops-storio-ngrx-component-store (npm) GHSA-vx5q-629w-pgcg, MAL-2026-13254 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-storio-ngrx-component-store |
Malicious release: Malicious code in bigops-storio-store-adapter (npm) GHSA-ww3c-w9f4-pc4w, MAL-2026-13256 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-storio-store-adapter |
Malicious release: Malicious code in bigops-shared-ui (npm) MAL-2026-13249 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-shared-ui |
Malicious release: Malicious code in bigops-storio-ngrx (npm) GHSA-v9j9-x22c-rgjq, MAL-2026-13253 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-storio-ngrx |
Malicious release: Malicious code in docker-api-client (npm) MAL-2026-13280 | Malicious | Not scored | 05 Aug, 2026 | npm docker-api-client |
Malicious release: Malicious code in @zzzcrypto/solana-spl-token (npm) MAL-2026-13214 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzcrypto/solana-spl-token |
Malicious release: Malicious code in @zzzcrypto/xrp-lib (npm) MAL-2026-13215 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzcrypto/xrp-lib |
Malicious release: Malicious code in @zzzcrypto/playwrite (npm) MAL-2026-13213 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzcrypto/playwrite |
Malicious release: Malicious code in @zzzcrypto/bitcoin-lib (npm) MAL-2026-13211 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzcrypto/bitcoin-lib |
Malicious release: Malicious code in @zzzcrypto/etherjs (npm) MAL-2026-13212 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzcrypto/etherjs |
Malicious release: Malicious code in devplatform-test-pvm-is-even (npm) MAL-2026-13267 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-test-pvm-is-even |
Malicious release: Malicious code in aws-sdk-v4 (npm) MAL-2026-13218 | Malicious | Not scored | 05 Aug, 2026 | npm aws-sdk-v4 |
Malicious release: Malicious code in devplatform-spa-use-track (npm) MAL-2026-13263 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-use-track |
Malicious release: Malicious code in devplatform-spa-ui (npm) MAL-2026-13262 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-ui |
Malicious release: Malicious code in devplatform-spa-plugin-s3 (npm) MAL-2026-13260 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-s3 |
Malicious release: Malicious code in devplatform-supafetch (npm) MAL-2026-13265 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-supafetch |
Malicious release: Malicious code in devplatform-vite-plugin-gle (npm) GHSA-8ph7-fh8m-9rwc, MAL-2026-13273 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-vite-plugin-gle |
Malicious release: Malicious code in devplatform-utils (npm) MAL-2026-13271 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-utils |
Malicious release: Malicious code in devplatform-test-pvm-is-odd (npm) MAL-2026-13268 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-test-pvm-is-odd |
Malicious release: Malicious code in devplatform-ui-kit (npm) GHSA-9cxc-5g3h-7j79, MAL-2026-13269 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-ui-kit |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-button (npm) GHSA-xp3x-7m7p-57w6, MAL-2026-13283 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-button |
Malicious release: Malicious code in devplatform-ui-notification (npm) MAL-2026-13270 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-ui-notification |
Malicious release: Malicious code in devplatform-vite-plugin-preserve-css-modules (npm) MAL-2026-13274 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-vite-plugin-preserve-css-modules |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-badge (npm) GHSA-mh6x-2875-j467, MAL-2026-13282 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-badge |
Malicious release: Malicious code in docsmate-docsmate-core (npm) MAL-2026-13281 | Malicious | Not scored | 05 Aug, 2026 | npm docsmate-docsmate-core |
Malicious release: Malicious code in dippy-invertor (npm) MAL-2026-13276 | Malicious | Not scored | 05 Aug, 2026 | npm dippy-invertor |
Malicious release: Malicious code in devplatform-zod-wip-api (npm) MAL-2026-13275 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-zod-wip-api |
Malicious release: Malicious code in docflow-cryptopro (npm) MAL-2026-13279 | Malicious | Not scored | 05 Aug, 2026 | npm docflow-cryptopro |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-dangerously-html (npm) GHSA-hpv7-97j5-42fj, MAL-2026-13285 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-dangerously-html |
Malicious release: Malicious code in dlp-dlp-core (npm) GHSA-grjf-cv97-2hjr, MAL-2026-13278 | Malicious | Not scored | 05 Aug, 2026 | npm dlp-dlp-core |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-dolyame-button (npm) GHSA-p8jq-ggcc-9fvg, MAL-2026-13286 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-dolyame-button |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-card (npm) GHSA-2rc6-wmc3-fw8w, MAL-2026-13284 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-card |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-image-card (npm) GHSA-x3cq-qwv4-jggj, MAL-2026-13287 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-image-card |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-popup (npm) GHSA-4639-xr73-h3rf, MAL-2026-13289 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-popup |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-store-button-set (npm) MAL-2026-13290 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-store-button-set |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-info-card (npm) GHSA-w5cf-r9p7-fv9c, MAL-2026-13288 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-info-card |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-text (npm) GHSA-h944-vgcf-56qw, MAL-2026-13291 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-text |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-dangerously-html (npm) GHSA-cxvx-6rxg-4hf3, MAL-2026-13294 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-dangerously-html |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-container (npm) GHSA-j64m-4266-c3cv, MAL-2026-13293 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-container |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-text (npm) GHSA-rr63-3r6v-pgqx, MAL-2026-13296 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-text |
Malicious release: Malicious code in dolyame-boxy-block (npm) MAL-2026-13298 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-block |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-highlighted-text (npm) GHSA-5fj7-27wx-q256, MAL-2026-13295 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-highlighted-text |
Malicious release: Malicious code in dolyame-boxy-atom-container (npm) MAL-2026-13292 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-container |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-card-gallery (npm) GHSA-p27r-36pg-42mg, MAL-2026-13301 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-card-gallery |