Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in boxy-service (npm) MAL-2026-13082 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-service |
Malicious release: Malicious code in boxy-test-block (npm) MAL-2026-13088 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-block |
Malicious release: Malicious code in boxy-validate-implicit-deps (npm) MAL-2026-13096 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-validate-implicit-deps |
Malicious release: Malicious code in boxy-semver (npm) MAL-2026-13081 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-semver |
Malicious release: Malicious code in boxy-tree-providers (npm) MAL-2026-13093 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-tree-providers |
Malicious release: Malicious code in bpm-foundation-auth (npm) MAL-2026-13104 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-auth |
Malicious release: Malicious code in boxy-storybook-addon-changelog (npm) MAL-2026-13086 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-storybook-addon-changelog |
Malicious release: Malicious code in boxy-story-header (npm) MAL-2026-13085 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-story-header |
Malicious release: Malicious code in boxy-use-what-changed (npm) MAL-2026-13095 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-use-what-changed |
Malicious release: Malicious code in bpm-foundation-ai-assistant (npm) MAL-2026-13100 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-ai-assistant |
Malicious release: Malicious code in bpm-foundation-base-configs (npm) MAL-2026-13105 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-base-configs |
Malicious release: Malicious code in bpm-foundation-api (npm) MAL-2026-13102 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-api |
Malicious release: Malicious code in boxy-use-calls (npm) MAL-2026-13094 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-use-calls |
Malicious release: Malicious code in boxy-webpack-test-utils (npm) MAL-2026-13097 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-webpack-test-utils |
Malicious release: Malicious code in boxy-wrapper-rspack-plugin (npm) MAL-2026-13098 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-wrapper-rspack-plugin |
Malicious release: Malicious code in bpm-foundation-analytics (npm) MAL-2026-13101 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-analytics |
Malicious release: Malicious code in boxy-wrapper-webpack-plugin (npm) MAL-2026-13099 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-wrapper-webpack-plugin |
Malicious release: Malicious code in bpm-foundation-bundle-optimization (npm) MAL-2026-13106 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-bundle-optimization |
Malicious release: Malicious code in bpm-foundation-common (npm) MAL-2026-13107 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-common |
Malicious release: Malicious code in bpm-foundation-app-configs (npm) MAL-2026-13103 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-app-configs |
Malicious release: Malicious code in bpm-foundation-delegate-docs (npm) MAL-2026-13109 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-delegate-docs |
Malicious release: Malicious code in bpm-foundation-date-range (npm) MAL-2026-13108 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-date-range |
Malicious release: Malicious code in bpm-foundation-storage (npm) MAL-2026-13119 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-storage |
Malicious release: Malicious code in bpm-foundation-feedback (npm) MAL-2026-13110 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-feedback |
Malicious release: Malicious code in bpm-foundation-sentry (npm) MAL-2026-13117 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-sentry |
Malicious release: Malicious code in bpm-foundation-linters (npm) MAL-2026-13112 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-linters |
Malicious release: Malicious code in bpm-foundation-tcs-configs (npm) MAL-2026-13120 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-tcs-configs |
Malicious release: Malicious code in bpm-foundation-nest-keycloak-connect (npm) MAL-2026-13113 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-nest-keycloak-connect |
Malicious release: Malicious code in bpm-foundation-rate-us (npm) MAL-2026-13115 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-rate-us |
Malicious release: Malicious code in bpm-foundation-husky (npm) MAL-2026-13111 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-husky |
Malicious release: Malicious code in bpm-foundation-oauth-client (npm) MAL-2026-13114 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-oauth-client |
Malicious release: Malicious code in bpm-foundation-renovate (npm) MAL-2026-13116 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-renovate |
Malicious release: Malicious code in bpm-foundation-statist-client (npm) MAL-2026-13118 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-statist-client |
Malicious release: Malicious code in bpm-foundation-test-jasmine (npm) MAL-2026-13121 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-test-jasmine |
Malicious release: Malicious code in bpm-ng-security (npm) MAL-2026-13122 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-ng-security |
Malicious release: Malicious code in bpm-foundation-test-jest (npm) MAL-2026-12515 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-test-jest |
Malicious release: Malicious code in cards-forms-clone-debit-clone (npm) MAL-2026-12526 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-clone-debit-clone |
Malicious release: Malicious code in cards-forms-credit-clone (npm) MAL-2026-12527 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-credit-clone |
Malicious release: Malicious code in capacity-capacity-core (npm) MAL-2026-12522 | Malicious | Not scored | 05 Aug, 2026 | npm capacity-capacity-core |
Malicious release: Malicious code in cards-forms-clone-cards-core-clone (npm) MAL-2026-12524 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-clone-cards-core-clone |
Malicious release: Malicious code in bpm-renovate-renovate-config (npm) MAL-2026-12517 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-renovate-renovate-config |
Malicious release: Malicious code in bpm-foundation-testing (npm) MAL-2026-12516 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-testing |
Malicious release: Malicious code in cards-forms-debit-clone (npm) MAL-2026-12528 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-debit-clone |
Malicious release: Malicious code in candy-candy-core (npm) MAL-2026-12521 | Malicious | Not scored | 05 Aug, 2026 | npm candy-candy-core |
Malicious release: Malicious code in bs-bs-core (npm) MAL-2026-12519 | Malicious | Not scored | 05 Aug, 2026 | npm bs-bs-core |
Malicious release: Malicious code in cards-forms-clone-credit-clone (npm) MAL-2026-12525 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-clone-credit-clone |
Malicious release: Malicious code in cards-forms-cards-core-clone (npm) MAL-2026-12523 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-cards-core-clone |
Malicious release: Malicious code in cardsmobile-rs-api (npm) MAL-2026-12535 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-rs-api |
Malicious release: Malicious code in caen-caen-core (npm) MAL-2026-12520 | Malicious | Not scored | 05 Aug, 2026 | npm caen-caen-core |
Malicious release: Malicious code in certificates-revocation-sw (npm) MAL-2026-12538 | Malicious | Not scored | 05 Aug, 2026 | npm certificates-revocation-sw |