Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in aws-sdk-v4 (npm) MAL-2026-13218 | Malicious | Not scored | 05 Aug, 2026 | npm aws-sdk-v4 |
Malicious release: Malicious code in devplatform-spa-use-track (npm) MAL-2026-13263 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-use-track |
Malicious release: Malicious code in devplatform-spa-ui (npm) MAL-2026-13262 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-ui |
Malicious release: Malicious code in devplatform-spa-plugin-s3 (npm) MAL-2026-13260 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-s3 |
Malicious release: Malicious code in devplatform-supafetch (npm) MAL-2026-13265 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-supafetch |
Malicious release: Malicious code in devplatform-vite-plugin-gle (npm) GHSA-8ph7-fh8m-9rwc, MAL-2026-13273 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-vite-plugin-gle |
Malicious release: Malicious code in devplatform-utils (npm) MAL-2026-13271 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-utils |
Malicious release: Malicious code in devplatform-test-pvm-is-odd (npm) MAL-2026-13268 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-test-pvm-is-odd |
Malicious release: Malicious code in devplatform-ui-kit (npm) GHSA-9cxc-5g3h-7j79, MAL-2026-13269 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-ui-kit |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-button (npm) GHSA-xp3x-7m7p-57w6, MAL-2026-13283 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-button |
Malicious release: Malicious code in devplatform-ui-notification (npm) MAL-2026-13270 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-ui-notification |
Malicious release: Malicious code in devplatform-vite-plugin-preserve-css-modules (npm) MAL-2026-13274 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-vite-plugin-preserve-css-modules |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-badge (npm) GHSA-mh6x-2875-j467, MAL-2026-13282 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-badge |
Malicious release: Malicious code in docsmate-docsmate-core (npm) MAL-2026-13281 | Malicious | Not scored | 05 Aug, 2026 | npm docsmate-docsmate-core |
Malicious release: Malicious code in dippy-invertor (npm) MAL-2026-13276 | Malicious | Not scored | 05 Aug, 2026 | npm dippy-invertor |
Malicious release: Malicious code in devplatform-zod-wip-api (npm) MAL-2026-13275 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-zod-wip-api |
Malicious release: Malicious code in docflow-cryptopro (npm) MAL-2026-13279 | Malicious | Not scored | 05 Aug, 2026 | npm docflow-cryptopro |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-dangerously-html (npm) GHSA-hpv7-97j5-42fj, MAL-2026-13285 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-dangerously-html |
Malicious release: Malicious code in dlp-dlp-core (npm) GHSA-grjf-cv97-2hjr, MAL-2026-13278 | Malicious | Not scored | 05 Aug, 2026 | npm dlp-dlp-core |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-dolyame-button (npm) GHSA-p8jq-ggcc-9fvg, MAL-2026-13286 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-dolyame-button |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-card (npm) GHSA-2rc6-wmc3-fw8w, MAL-2026-13284 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-card |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-image-card (npm) GHSA-x3cq-qwv4-jggj, MAL-2026-13287 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-image-card |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-popup (npm) GHSA-4639-xr73-h3rf, MAL-2026-13289 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-popup |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-store-button-set (npm) MAL-2026-13290 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-store-button-set |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-info-card (npm) GHSA-w5cf-r9p7-fv9c, MAL-2026-13288 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-info-card |
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-text (npm) GHSA-h944-vgcf-56qw, MAL-2026-13291 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-text |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-dangerously-html (npm) GHSA-cxvx-6rxg-4hf3, MAL-2026-13294 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-dangerously-html |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-container (npm) GHSA-j64m-4266-c3cv, MAL-2026-13293 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-container |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-text (npm) GHSA-rr63-3r6v-pgqx, MAL-2026-13296 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-text |
Malicious release: Malicious code in dolyame-boxy-block (npm) MAL-2026-13298 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-block |
Malicious release: Malicious code in dolyame-boxy-atom-desktop-bnpl-highlighted-text (npm) GHSA-5fj7-27wx-q256, MAL-2026-13295 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-desktop-bnpl-highlighted-text |
Malicious release: Malicious code in dolyame-boxy-atom-container (npm) MAL-2026-13292 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-container |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-card-gallery (npm) GHSA-p27r-36pg-42mg, MAL-2026-13301 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-card-gallery |
Malicious release: Malicious code in dolyame-boxy-component-story-name (npm) MAL-2026-13299 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-component-story-name |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-hero-title (npm) GHSA-65h9-375j-h858, MAL-2026-13305 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-hero-title |
Malicious release: Malicious code in dolyame-boxy-atom-icon-loader (npm) GHSA-5j2m-28q8-4955, MAL-2026-13297 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-icon-loader |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-button-set (npm) GHSA-hf9m-4wxq-3fcq, MAL-2026-13300 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-button-set |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-picture-gallery (npm) GHSA-gf73-fvqq-2f8f, MAL-2026-13307 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-picture-gallery |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-card-panel (npm) GHSA-c75h-f786-3xrc, MAL-2026-13302 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-card-panel |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-text-block (npm) GHSA-w896-652g-jg96, MAL-2026-13309 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-text-block |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-header (npm) GHSA-p757-xmr6-f79x, MAL-2026-13304 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-header |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-button (npm) GHSA-f3r5-jmpg-pmrm, MAL-2026-13313 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-button |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-image-plus-text (npm) GHSA-cm5j-c327-p46g, MAL-2026-13306 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-image-plus-text |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-popup (npm) GHSA-54m5-fwc4-g8cq, MAL-2026-13308 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-popup |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-breadcrumbs (npm) GHSA-42r9-vvjf-fx84, MAL-2026-13312 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-breadcrumbs |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-footer (npm) GHSA-v749-ghvj-538r, MAL-2026-13303 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-footer |
Malicious release: Malicious code in dolyame-boxy-desktop-bnpl-title (npm) GHSA-q5wr-4pm9-cv7p, MAL-2026-13310 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-desktop-bnpl-title |
Malicious release: Malicious code in dolyame-boxy-fonts (npm) GHSA-rphf-wm4q-p6rj, MAL-2026-13311 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-fonts |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-cards (npm) GHSA-j8fg-fh4m-2cw2, MAL-2026-13314 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-cards |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-preset-container (npm) GHSA-rr4c-36r7-8vp4, MAL-2026-13326 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-preset-container |