Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-badge (npm) GHSA-mh6x-2875-j467, MAL-2026-13282 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-badge |
Malicious release: Malicious code in docsmate-docsmate-core (npm) MAL-2026-13281 | Malicious | Not scored | 05 Aug, 2026 | npm docsmate-docsmate-core |
Malicious release: Malicious code in dippy-invertor (npm) MAL-2026-13276 | Malicious | Not scored | 05 Aug, 2026 | npm dippy-invertor |
Malicious release: Malicious code in devplatform-zod-wip-api (npm) MAL-2026-13275 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-zod-wip-api |
Malicious release: Malicious code in docflow-cryptopro (npm) MAL-2026-13279 | Malicious | Not scored | 05 Aug, 2026 | npm docflow-cryptopro |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-dangerously-html (npm) GHSA-hpv7-97j5-42fj, MAL-2026-13285 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-dangerously-html |
Malicious release: Malicious code in dlp-dlp-core (npm) GHSA-grjf-cv97-2hjr, MAL-2026-13278 | Malicious | Not scored | 05 Aug, 2026 | npm dlp-dlp-core |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-dolyame-button (npm) GHSA-p8jq-ggcc-9fvg, MAL-2026-13286 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-dolyame-button |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-card (npm) GHSA-2rc6-wmc3-fw8w, MAL-2026-13284 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-card |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-image-card (npm) GHSA-x3cq-qwv4-jggj, MAL-2026-13287 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-image-card |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-popup (npm) GHSA-4639-xr73-h3rf, MAL-2026-13289 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-popup |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-store-button-set (npm) MAL-2026-13290 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-store-button-set |
Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size CVE-2026-70598, GHSA-pfmc-3mgc-p6fp | Low | 0.1% | 05 Aug, 2026 | npm electron |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-info-card (npm) GHSA-w5cf-r9p7-fv9c, MAL-2026-13288 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-info-card |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-text (npm) GHSA-h944-vgcf-56qw, MAL-2026-13291 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-text |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-dangerously-html (npm) GHSA-cxvx-6rxg-4hf3, MAL-2026-13294 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-dangerously-html |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-container (npm) GHSA-j64m-4266-c3cv, MAL-2026-13293 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-container |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-text (npm) GHSA-rr63-3r6v-pgqx, MAL-2026-13296 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-text |
Malicious release: Malicious code in dolyame-boxy-block (npm) MAL-2026-13298 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-block |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-highlighted-text (npm) GHSA-5fj7-27wx-q256, MAL-2026-13295 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-highlighted-text |
Malicious release: Malicious code in dolyame-boxy-atom-container (npm) MAL-2026-13292 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-container |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-card-gallery (npm) GHSA-p27r-36pg-42mg, MAL-2026-13301 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-card-gallery |
Malicious release: Malicious code in dolyame-boxy-component-story-name (npm) MAL-2026-13299 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-component-story-name |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-hero-title (npm) GHSA-65h9-375j-h858, MAL-2026-13305 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-hero-title |
Malicious release: Malicious code in dolyame-boxy-atom-icon-loader (npm) GHSA-5j2m-28q8-4955, MAL-2026-13297 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-icon-loader |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-button-set (npm) GHSA-hf9m-4wxq-3fcq, MAL-2026-13300 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-button-set |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-picture-gallery (npm) GHSA-gf73-fvqq-2f8f, MAL-2026-13307 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-picture-gallery |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-card-panel (npm) GHSA-c75h-f786-3xrc, MAL-2026-13302 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-card-panel |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-text-block (npm) GHSA-w896-652g-jg96, MAL-2026-13309 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-text-block |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-header (npm) GHSA-p757-xmr6-f79x, MAL-2026-13304 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-header |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-button (npm) GHSA-f3r5-jmpg-pmrm, MAL-2026-13313 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-button |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-image-plus-text (npm) GHSA-cm5j-c327-p46g, MAL-2026-13306 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-image-plus-text |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-popup (npm) GHSA-54m5-fwc4-g8cq, MAL-2026-13308 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-popup |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-breadcrumbs (npm) GHSA-42r9-vvjf-fx84, MAL-2026-13312 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-breadcrumbs |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-footer (npm) GHSA-v749-ghvj-538r, MAL-2026-13303 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-footer |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-title (npm) GHSA-q5wr-4pm9-cv7p, MAL-2026-13310 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-title |
Malicious release: Malicious code in dolyame-boxy-fonts (npm) GHSA-rphf-wm4q-p6rj, MAL-2026-13311 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-fonts |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-cards (npm) GHSA-j8fg-fh4m-2cw2, MAL-2026-13314 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-cards |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-preset-container (npm) GHSA-rr4c-36r7-8vp4, MAL-2026-13326 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-preset-container |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-features (npm) GHSA-gcf9-6q6g-6qjf, MAL-2026-13317 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-features |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-items (npm) GHSA-jh2q-fjxj-2jrr, MAL-2026-13319 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-items |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-origination (npm) GHSA-gg6p-w396-p97f, MAL-2026-13323 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-origination |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-code-text (npm) GHSA-m5jf-fg89-7qqf, MAL-2026-13315 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-code-text |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-info-slider (npm) GHSA-jqw3-qv57-jf48, MAL-2026-13318 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-info-slider |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-picture-gallery (npm) GHSA-66p9-hhr7-jqr7, MAL-2026-13325 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-picture-gallery |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-partners (npm) GHSA-8j6w-c4q8-8hm5, MAL-2026-13324 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-partners |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-navigation (npm) GHSA-wcqm-j33w-hfrv, MAL-2026-13322 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-navigation |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-main-banner (npm) GHSA-w834-22q3-g727, MAL-2026-13320 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-main-banner |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-documents (npm) MAL-2026-13316 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-documents |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-mobile-application (npm) GHSA-9368-qf6c-gcr6, MAL-2026-13321 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-mobile-application |