Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in boxy-pkg-deps-hash (npm) MAL-2026-13075 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-pkg-deps-hash |
Malicious release: Malicious code in boxy-mmb-types (npm) MAL-2026-13072 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-mmb-types |
Malicious release: Malicious code in boxy-test-maker (npm) MAL-2026-13091 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-maker |
Malicious release: Malicious code in boxy-pkg-path (npm) MAL-2026-13076 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-pkg-path |
Malicious release: Malicious code in boxy-scroll-providers (npm) MAL-2026-13079 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-scroll-providers |
Malicious release: Malicious code in boxy-search-workspace-substrings (npm) MAL-2026-13080 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-search-workspace-substrings |
Malicious release: Malicious code in boxy-test-block-fixture (npm) MAL-2026-13089 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-block-fixture |
Malicious release: Malicious code in boxy-tokens (npm) MAL-2026-13092 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-tokens |
Malicious release: Malicious code in boxy-sitree (npm) MAL-2026-13083 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-sitree |
Malicious release: Malicious code in boxy-rspack-optimize-sharing-runtime (npm) MAL-2026-13078 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-rspack-optimize-sharing-runtime |
Malicious release: Malicious code in boxy-test-host (npm) MAL-2026-13090 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-host |
Malicious release: Malicious code in boxy-temper (npm) MAL-2026-13087 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-temper |
Malicious release: Malicious code in boxy-service (npm) MAL-2026-13082 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-service |
Malicious release: Malicious code in boxy-test-block (npm) MAL-2026-13088 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-test-block |
Malicious release: Malicious code in boxy-validate-implicit-deps (npm) MAL-2026-13096 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-validate-implicit-deps |
Malicious release: Malicious code in boxy-semver (npm) MAL-2026-13081 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-semver |
Malicious release: Malicious code in boxy-tree-providers (npm) MAL-2026-13093 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-tree-providers |
Malicious release: Malicious code in bpm-foundation-auth (npm) MAL-2026-13104 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-auth |
Malicious release: Malicious code in boxy-storybook-addon-changelog (npm) MAL-2026-13086 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-storybook-addon-changelog |
Malicious release: Malicious code in boxy-story-header (npm) MAL-2026-13085 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-story-header |
Malicious release: Malicious code in boxy-use-what-changed (npm) MAL-2026-13095 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-use-what-changed |
Malicious release: Malicious code in bpm-foundation-ai-assistant (npm) MAL-2026-13100 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-ai-assistant |
Malicious release: Malicious code in bpm-foundation-base-configs (npm) MAL-2026-13105 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-base-configs |
Malicious release: Malicious code in bpm-foundation-api (npm) MAL-2026-13102 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-api |
Malicious release: Malicious code in boxy-use-calls (npm) MAL-2026-13094 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-use-calls |
Malicious release: Malicious code in boxy-webpack-test-utils (npm) MAL-2026-13097 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-webpack-test-utils |
Malicious release: Malicious code in boxy-wrapper-rspack-plugin (npm) MAL-2026-13098 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-wrapper-rspack-plugin |
Malicious release: Malicious code in bpm-foundation-analytics (npm) MAL-2026-13101 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-analytics |
Malicious release: Malicious code in boxy-wrapper-webpack-plugin (npm) MAL-2026-13099 | Malicious | Not scored | 05 Aug, 2026 | npm boxy-wrapper-webpack-plugin |
Malicious release: Malicious code in bpm-foundation-bundle-optimization (npm) MAL-2026-13106 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-bundle-optimization |
Malicious release: Malicious code in bpm-foundation-common (npm) MAL-2026-13107 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-common |
Malicious release: Malicious code in bpm-foundation-app-configs (npm) MAL-2026-13103 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-app-configs |
Malicious release: Malicious code in bpm-foundation-delegate-docs (npm) MAL-2026-13109 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-delegate-docs |
Malicious release: Malicious code in bpm-foundation-date-range (npm) MAL-2026-13108 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-date-range |
Malicious release: Malicious code in bpm-foundation-storage (npm) MAL-2026-13119 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-storage |
Malicious release: Malicious code in bpm-foundation-feedback (npm) MAL-2026-13110 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-feedback |
Malicious release: Malicious code in bpm-foundation-sentry (npm) MAL-2026-13117 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-sentry |
Malicious release: Malicious code in bpm-foundation-linters (npm) MAL-2026-13112 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-linters |
Malicious release: Malicious code in bpm-foundation-tcs-configs (npm) MAL-2026-13120 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-tcs-configs |
Malicious release: Malicious code in bpm-foundation-nest-keycloak-connect (npm) MAL-2026-13113 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-nest-keycloak-connect |
Malicious release: Malicious code in bpm-foundation-rate-us (npm) MAL-2026-13115 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-rate-us |
Malicious release: Malicious code in bpm-foundation-husky (npm) MAL-2026-13111 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-husky |
Malicious release: Malicious code in bpm-foundation-oauth-client (npm) MAL-2026-13114 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-oauth-client |
Malicious release: Malicious code in bpm-foundation-renovate (npm) MAL-2026-13116 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-renovate |
Malicious release: Malicious code in bpm-foundation-statist-client (npm) MAL-2026-13118 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-statist-client |
Malicious release: Malicious code in bpm-foundation-test-jasmine (npm) MAL-2026-13121 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-test-jasmine |
Malicious release: Malicious code in bpm-ng-security (npm) MAL-2026-13122 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-ng-security |
Malicious release: Malicious code in bpm-foundation-test-jest (npm) MAL-2026-12515 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-test-jest |
Malicious release: Malicious code in cards-forms-clone-debit-clone (npm) MAL-2026-12526 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-clone-debit-clone |
Malicious release: Malicious code in cards-forms-credit-clone (npm) MAL-2026-12527 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-credit-clone |