Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in boxy-client-loader (npm) MAL-2026-13032 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-client-loader |
Malicious release: Malicious code in boxy-contract (npm) MAL-2026-13034 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-contract |
Malicious release: Malicious code in boxy-add-link (npm) MAL-2026-13029 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-add-link |
Malicious release: Malicious code in bnpl-core (npm) MAL-2026-13023 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-core |
Malicious release: Malicious code in boxy-adapter-tramvai (npm) MAL-2026-13028 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-adapter-tramvai |
Malicious release: Malicious code in bnpl-blocks-types (npm) MAL-2026-13020 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-types |
Malicious release: Malicious code in bnpl-forms-test-utils (npm) MAL-2026-13024 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-forms-test-utils |
Malicious release: Malicious code in bnpl-blocks-types-gen (npm) MAL-2026-13021 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-types-gen |
Malicious release: Malicious code in boxy-docusaurus-plugin-content-docs-light (npm) MAL-2026-13041 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-docusaurus-plugin-content-docs-light |
Malicious release: Malicious code in bnpl-molecule-mobile-bnpl-selector (npm) MAL-2026-13026 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-molecule-mobile-bnpl-selector |
Malicious release: Malicious code in boxy-cook (npm) MAL-2026-13035 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-cook |
Malicious release: Malicious code in boxy-expander-contract (npm) MAL-2026-13043 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-expander-contract |
Malicious release: Malicious code in boxy-devtools-tokens (npm) MAL-2026-13040 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-devtools-tokens |
Malicious release: Malicious code in boxy-devtools (npm) MAL-2026-13039 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-devtools |
Malicious release: Malicious code in boxy-fixture-sb (npm) MAL-2026-13048 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-sb |
Malicious release: Malicious code in boxy-debugger (npm) MAL-2026-13036 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-debugger |
Malicious release: Malicious code in boxy-demo-tokens (npm) MAL-2026-13037 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-demo-tokens |
Malicious release: Malicious code in boxy-esm-shims (npm) MAL-2026-13042 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-esm-shims |
Malicious release: Malicious code in boxy-deps-calculator (npm) MAL-2026-13038 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-deps-calculator |
Malicious release: Malicious code in boxy-fixture-pendel (npm) MAL-2026-13046 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-pendel |
Malicious release: Malicious code in boxy-fixture (npm) MAL-2026-13044 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture |
Malicious release: Malicious code in boxy-fixture-paperclip (npm) MAL-2026-13045 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-paperclip |
Malicious release: Malicious code in boxy-maker-extendable-minihost (npm) MAL-2026-13059 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-extendable-minihost |
Malicious release: Malicious code in boxy-fixture-pfa (npm) MAL-2026-13047 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-fixture-pfa |
Malicious release: Malicious code in boxy-get-retry-url (npm) MAL-2026-13049 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-get-retry-url |
Malicious release: Malicious code in boxy-maker-page-readiness (npm) MAL-2026-13061 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-page-readiness |
Malicious release: Malicious code in boxy-lcd (npm) MAL-2026-13052 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-lcd |
Malicious release: Malicious code in boxy-live (npm) MAL-2026-13054 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-live |
Malicious release: Malicious code in boxy-maker (npm) MAL-2026-13057 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker |
Malicious release: Malicious code in boxy-lazy-loader (npm) MAL-2026-13051 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-lazy-loader |
Malicious release: Malicious code in boxy-loader (npm) MAL-2026-13055 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-loader |
Malicious release: Malicious code in boxy-maker-readiness (npm) MAL-2026-13062 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-readiness |
Malicious release: Malicious code in boxy-legacy-providers (npm) MAL-2026-13053 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-legacy-providers |
Malicious release: Malicious code in boxy-maker-legacy (npm) MAL-2026-13060 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-legacy |
Malicious release: Malicious code in boxy-make-tokens-map (npm) MAL-2026-13056 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-make-tokens-map |
Malicious release: Malicious code in boxy-global-modules-webpack-plugin (npm) MAL-2026-13050 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-global-modules-webpack-plugin |
Malicious release: Malicious code in boxy-maker-bus (npm) MAL-2026-13058 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-bus |
Malicious release: Malicious code in boxy-maker-sticky (npm) MAL-2026-13065 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-sticky |
Malicious release: Malicious code in boxy-maker-skeleton (npm) MAL-2026-13064 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-skeleton |
Malicious release: Malicious code in boxy-micro-story (npm) MAL-2026-13067 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-micro-story |
Malicious release: Malicious code in boxy-maker-scroll (npm) MAL-2026-13063 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-scroll |
Malicious release: Malicious code in boxy-mif-tokens (npm) MAL-2026-13068 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mif-tokens |
Malicious release: Malicious code in boxy-render-unwrap (npm) MAL-2026-13077 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-render-unwrap |
Malicious release: Malicious code in boxy-mops (npm) MAL-2026-13073 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mops |
Malicious release: Malicious code in boxy-maker-wave (npm) MAL-2026-13066 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-maker-wave |
Malicious release: Malicious code in boxy-mm-advisor (npm) MAL-2026-13069 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mm-advisor |
Malicious release: Malicious code in boxy-mm-server-loader (npm) MAL-2026-13070 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mm-server-loader |
Malicious release: Malicious code in boxy-page-story (npm) MAL-2026-13074 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-page-story |
Malicious release: Malicious code in boxy-sticky-providers (npm) MAL-2026-13084 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-sticky-providers |
Malicious release: Malicious code in boxy-mmb-deps-pvm-plugin (npm) MAL-2026-13071 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mmb-deps-pvm-plugin |