Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in bnpl-blocks-atom-bnpl-checkbox (npm) MAL-2026-13527 | Malicious | Not scored | 07 Aug, 2026 | npm bnpl-blocks-atom-bnpl-checkbox |
Malicious release: Malicious code in bigops-abstract-entity-data (npm) MAL-2026-13524 | Malicious | Not scored | 07 Aug, 2026 | npm bigops-abstract-entity-data |
Malicious release: Malicious code in dolyame-ui-buttonstore (npm) MAL-2026-13554 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-buttonstore |
Malicious release: Malicious code in dolyame-ui-memoizeweak (npm) MAL-2026-13589 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-memoizeweak |
Malicious release: Malicious code in dolyame-ui-inputtime (npm) MAL-2026-13586 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputtime |
Malicious release: Malicious code in ded-pwa-test-pub-pkg (npm) MAL-2026-13537 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-test-pub-pkg |
Malicious release: Malicious code in dolyame-ui-tabslayout (npm) MAL-2026-13602 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-tabslayout |
Malicious release: Malicious code in dolyame-ui-inlineedit (npm) MAL-2026-13573 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inlineedit |
Malicious release: Malicious code in dolyame-ui-tableinline (npm) MAL-2026-13600 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-tableinline |
Malicious release: Malicious code in delivery-ci-documentation (npm) MAL-2026-13541 | Malicious | Not scored | 07 Aug, 2026 | npm delivery-ci-documentation |
Malicious release: Malicious code in dolyame-ui-popupcarousel (npm) MAL-2026-13593 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-popupcarousel |
Malicious release: Malicious code in dolyame-ui-overridestyles (npm) MAL-2026-13591 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-overridestyles |
Malicious release: Malicious code in devplatform-eslint-config (npm) MAL-2026-13544 | Malicious | Not scored | 07 Aug, 2026 | npm devplatform-eslint-config |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-navigation-arrow (npm) MAL-2026-13550 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-boxy-atom-bnpl-navigation-arrow |
Malicious release: Malicious code in dolyame-ui-inputmoney (npm) MAL-2026-13579 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputmoney |
Malicious release: Malicious code in ded-pwa-c-micro (npm) MAL-2026-13536 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-c-micro |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-faq (npm) MAL-2026-13551 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-boxy-independent-bnpl-faq |
Malicious release: Malicious code in dolyame-ui-draghoc (npm) MAL-2026-13567 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-draghoc |
Malicious release: Malicious code in dolyame-ui-contenteditable (npm) MAL-2026-13560 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-contenteditable |
Malicious release: Malicious code in dolyame-ui-noindex (npm) MAL-2026-13590 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-noindex |
Malicious release: Malicious code in dolyame-ui-inputcard (npm) MAL-2026-13575 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputcard |
Malicious release: Malicious code in bigops-security (npm) MAL-2026-13525 | Malicious | Not scored | 07 Aug, 2026 | npm bigops-security |
Malicious release: Malicious code in bnpl-blocks-atom-bnpl-image-card (npm) MAL-2026-13529 | Malicious | Not scored | 07 Aug, 2026 | npm bnpl-blocks-atom-bnpl-image-card |
Malicious release: Malicious code in dolyame-ui-selectaccount (npm) MAL-2026-13598 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-selectaccount |
Malicious release: Malicious code in dolyame-ui-clickoutsidehoc (npm) MAL-2026-13558 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-clickoutsidehoc |
Malicious release: Malicious code in dolyame-ui-generateid (npm) MAL-2026-13571 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-generateid |
Malicious release: Malicious code in bnpl-blocks-atom-bnpl-loader (npm) MAL-2026-13530 | Malicious | Not scored | 07 Aug, 2026 | npm bnpl-blocks-atom-bnpl-loader |
Malicious release: Malicious code in dolyame-ui-inputtools (npm) MAL-2026-13587 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputtools |
Malicious release: Malicious code in dolyame-ui-attachfile (npm) MAL-2026-13504 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-attachfile |
Malicious release: Malicious code in dolyame-ui-inputcolor (npm) MAL-2026-13507 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputcolor |
Malicious release: Malicious code in delivery-ci-dpat (npm) MAL-2026-13500 | Malicious | Not scored | 07 Aug, 2026 | npm delivery-ci-dpat |
Malicious release: Malicious code in dolyame-ui-progresscircle (npm) MAL-2026-13510 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-progresscircle |
Malicious release: Malicious code in ded-pwa-ded-pwa-core (npm) MAL-2026-13498 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-ded-pwa-core |
Malicious release: Malicious code in dolyame-ui-inputbox (npm) MAL-2026-13506 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputbox |
Malicious release: Malicious code in dolyame-ui-inputpassword (npm) MAL-2026-13508 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-inputpassword |
Malicious release: Malicious code in dolyame-ui-tabsblock (npm) MAL-2026-13512 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-tabsblock |
Malicious release: Malicious code in eacq-cdk (npm) MAL-2026-13513 | Malicious | Not scored | 07 Aug, 2026 | npm eacq-cdk |
Malicious release: Malicious code in delivery-ci-codeceptjs-fork (npm) MAL-2026-13499 | Malicious | Not scored | 07 Aug, 2026 | npm delivery-ci-codeceptjs-fork |
Malicious release: Malicious code in dolyame-ui-iconloaderhoc (npm) MAL-2026-13505 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-iconloaderhoc |
Malicious release: Malicious code in delivery-ci-jira-rnd (npm) MAL-2026-13501 | Malicious | Not scored | 07 Aug, 2026 | npm delivery-ci-jira-rnd |
Malicious release: Malicious code in ded-pwa-c-cms (npm) MAL-2026-13496 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-c-cms |
Malicious release: Malicious code in dolyame-ui-lazyrender (npm) MAL-2026-13509 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-lazyrender |
Malicious release: Malicious code in dolyame-ui-stateutils (npm) MAL-2026-13511 | Malicious | Not scored | 07 Aug, 2026 | npm dolyame-ui-stateutils |
Malicious release: Malicious code in devplatform-react-mcp (npm) MAL-2026-13502 | Malicious | Not scored | 07 Aug, 2026 | npm devplatform-react-mcp |
Malicious release: Malicious code in eacq-dialog (npm) MAL-2026-13515 | Malicious | Not scored | 07 Aug, 2026 | npm eacq-dialog |
Malicious release: Malicious code in bigops-telephony-mock (npm) MAL-2026-13494 | Malicious | Not scored | 07 Aug, 2026 | npm bigops-telephony-mock |
Malicious release: Malicious code in ded-pwa-c-page-maker-props (npm) MAL-2026-13497 | Malicious | Not scored | 07 Aug, 2026 | npm ded-pwa-c-page-maker-props |
Malicious release: Malicious code in eacq-core (npm) MAL-2026-13514 | Malicious | Not scored | 07 Aug, 2026 | npm eacq-core |
Malicious release: Malicious code in distributorblock (npm) MAL-2026-13503 | Malicious | Not scored | 07 Aug, 2026 | npm distributorblock |
Malicious release: Malicious code in streak-kit-map (npm) GHSA-6698-9vj2-cgx8, MAL-2026-13519 | Malicious | Not scored | 07 Aug, 2026 | npm streak-kit-map |