Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in boxy-devtools-tokens (npm) MAL-2026-13040 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-devtools-tokens |
Malicious release: Malicious code in boxy-devtools (npm) MAL-2026-13039 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-devtools |
Malicious release: Malicious code in boxy-fixture-sb (npm) MAL-2026-13048 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-sb |
Malicious release: Malicious code in boxy-debugger (npm) MAL-2026-13036 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-debugger |
Malicious release: Malicious code in boxy-demo-tokens (npm) MAL-2026-13037 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-demo-tokens |
Malicious release: Malicious code in boxy-esm-shims (npm) MAL-2026-13042 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-esm-shims |
Malicious release: Malicious code in boxy-deps-calculator (npm) MAL-2026-13038 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-deps-calculator |
Malicious release: Malicious code in boxy-fixture-pendel (npm) MAL-2026-13046 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-pendel |
Malicious release: Malicious code in boxy-fixture (npm) MAL-2026-13044 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture |
Malicious release: Malicious code in boxy-fixture-paperclip (npm) MAL-2026-13045 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-paperclip |
Malicious release: Malicious code in boxy-maker-extendable-minihost (npm) MAL-2026-13059 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-extendable-minihost |
Malicious release: Malicious code in boxy-fixture-pfa (npm) MAL-2026-13047 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-pfa |
Malicious release: Malicious code in boxy-get-retry-url (npm) MAL-2026-13049 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-get-retry-url |
Malicious release: Malicious code in boxy-maker-page-readiness (npm) MAL-2026-13061 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-page-readiness |
Malicious release: Malicious code in boxy-lcd (npm) MAL-2026-13052 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-lcd |
Malicious release: Malicious code in boxy-live (npm) MAL-2026-13054 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-live |
Malicious release: Malicious code in boxy-maker (npm) MAL-2026-13057 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker |
Malicious release: Malicious code in boxy-lazy-loader (npm) MAL-2026-13051 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-lazy-loader |
Malicious release: Malicious code in boxy-loader (npm) MAL-2026-13055 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-loader |
Malicious release: Malicious code in boxy-maker-readiness (npm) MAL-2026-13062 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-readiness |
Malicious release: Malicious code in boxy-legacy-providers (npm) MAL-2026-13053 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-legacy-providers |
Malicious release: Malicious code in boxy-maker-legacy (npm) MAL-2026-13060 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-legacy |
Malicious release: Malicious code in boxy-make-tokens-map (npm) MAL-2026-13056 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-make-tokens-map |
Malicious release: Malicious code in boxy-global-modules-webpack-plugin (npm) MAL-2026-13050 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-global-modules-webpack-plugin |
Malicious release: Malicious code in boxy-maker-bus (npm) MAL-2026-13058 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-bus |
Malicious release: Malicious code in boxy-maker-sticky (npm) MAL-2026-13065 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-sticky |
Malicious release: Malicious code in boxy-maker-skeleton (npm) MAL-2026-13064 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-skeleton |
Malicious release: Malicious code in boxy-micro-story (npm) MAL-2026-13067 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-micro-story |
Malicious release: Malicious code in boxy-maker-scroll (npm) MAL-2026-13063 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-scroll |
Malicious release: Malicious code in boxy-mif-tokens (npm) MAL-2026-13068 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mif-tokens |
Malicious release: Malicious code in boxy-render-unwrap (npm) MAL-2026-13077 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-render-unwrap |
Malicious release: Malicious code in boxy-mops (npm) MAL-2026-13073 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mops |
Malicious release: Malicious code in boxy-maker-wave (npm) MAL-2026-13066 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-wave |
Malicious release: Malicious code in boxy-mm-advisor (npm) MAL-2026-13069 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mm-advisor |
Malicious release: Malicious code in boxy-mm-server-loader (npm) MAL-2026-13070 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mm-server-loader |
Malicious release: Malicious code in boxy-page-story (npm) MAL-2026-13074 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-page-story |
Malicious release: Malicious code in boxy-sticky-providers (npm) MAL-2026-13084 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-sticky-providers |
Malicious release: Malicious code in boxy-mmb-deps-pvm-plugin (npm) MAL-2026-13071 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mmb-deps-pvm-plugin |
Malicious release: Malicious code in boxy-pkg-deps-hash (npm) MAL-2026-13075 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-pkg-deps-hash |
Malicious release: Malicious code in boxy-mmb-types (npm) MAL-2026-13072 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mmb-types |
Malicious release: Malicious code in boxy-test-maker (npm) MAL-2026-13091 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-maker |
Malicious release: Malicious code in boxy-pkg-path (npm) MAL-2026-13076 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-pkg-path |
Malicious release: Malicious code in boxy-scroll-providers (npm) MAL-2026-13079 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-scroll-providers |
Malicious release: Malicious code in boxy-search-workspace-substrings (npm) MAL-2026-13080 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-search-workspace-substrings |
Malicious release: Malicious code in boxy-test-block-fixture (npm) MAL-2026-13089 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-block-fixture |
Malicious release: Malicious code in boxy-tokens (npm) MAL-2026-13092 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-tokens |
Malicious release: Malicious code in boxy-sitree (npm) MAL-2026-13083 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-sitree |
Malicious release: Malicious code in boxy-rspack-optimize-sharing-runtime (npm) MAL-2026-13078 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-rspack-optimize-sharing-runtime |
Malicious release: Malicious code in boxy-test-host (npm) MAL-2026-13090 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-host |
Malicious release: Malicious code in boxy-temper (npm) MAL-2026-13087 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-temper |