Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in bpm-foundation-test-jest (npm) MAL-2026-12515 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-test-jest |
Malicious release: Malicious code in cards-forms-clone-debit-clone (npm) MAL-2026-12526 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-clone-debit-clone |
Malicious release: Malicious code in cards-forms-credit-clone (npm) MAL-2026-12527 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-credit-clone |
Malicious release: Malicious code in capacity-capacity-core (npm) MAL-2026-12522 | Malicious | Not scored | 05 Aug, 2026 | npm capacity-capacity-core |
Malicious release: Malicious code in cards-forms-clone-cards-core-clone (npm) MAL-2026-12524 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-clone-cards-core-clone |
Malicious release: Malicious code in bpm-renovate-renovate-config (npm) MAL-2026-12517 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-renovate-renovate-config |
Malicious release: Malicious code in bpm-foundation-testing (npm) MAL-2026-12516 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-testing |
Malicious release: Malicious code in cards-forms-debit-clone (npm) MAL-2026-12528 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-debit-clone |
Malicious release: Malicious code in candy-candy-core (npm) MAL-2026-12521 | Malicious | Not scored | 05 Aug, 2026 | npm candy-candy-core |
Malicious release: Malicious code in bs-bs-core (npm) MAL-2026-12519 | Malicious | Not scored | 05 Aug, 2026 | npm bs-bs-core |
Malicious release: Malicious code in cards-forms-clone-credit-clone (npm) MAL-2026-12525 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-clone-credit-clone |
Malicious release: Malicious code in cards-forms-cards-core-clone (npm) MAL-2026-12523 | Malicious | Not scored | 05 Aug, 2026 | npm cards-forms-cards-core-clone |
Malicious release: Malicious code in cardsmobile-rs-api (npm) MAL-2026-12535 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-rs-api |
Malicious release: Malicious code in caen-caen-core (npm) MAL-2026-12520 | Malicious | Not scored | 05 Aug, 2026 | npm caen-caen-core |
Malicious release: Malicious code in certificates-revocation-sw (npm) MAL-2026-12538 | Malicious | Not scored | 05 Aug, 2026 | npm certificates-revocation-sw |
Malicious release: Malicious code in cardsmobile-data-utils (npm) MAL-2026-12531 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-data-utils |
Malicious release: Malicious code in certificates-revocation-utils (npm) MAL-2026-12539 | Malicious | Not scored | 05 Aug, 2026 | npm certificates-revocation-utils |
Malicious release: Malicious code in cardsmobile-cardsmobile-core (npm) MAL-2026-12529 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-cardsmobile-core |
Malicious release: Malicious code in cardsmobile-http (npm) MAL-2026-12533 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-http |
Malicious release: Malicious code in cbp-exchange-government-cbp-exchange-government-core (npm) MAL-2026-12537 | Malicious | Not scored | 05 Aug, 2026 | npm cbp-exchange-government-cbp-exchange-government-core |
Malicious release: Malicious code in cardsmobile-storage (npm) MAL-2026-12536 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-storage |
Malicious release: Malicious code in cardsmobile-event-emitter (npm) MAL-2026-12532 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-event-emitter |
Malicious release: Malicious code in cardsmobile-notifications (npm) MAL-2026-12534 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-notifications |
Malicious release: Malicious code in cardsmobile-command-utils (npm) MAL-2026-12530 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-command-utils |
Malicious release: Malicious code in checkout-base-analytics-data (npm) MAL-2026-12543 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-base-analytics-data |
Malicious release: Malicious code in checkout-create-draft-agreement-am (npm) MAL-2026-12551 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-create-draft-agreement-am |
Malicious release: Malicious code in checkout-cashback-logic (npm) MAL-2026-12546 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-cashback-logic |
Malicious release: Malicious code in checkout-accounts-logic (npm) MAL-2026-12542 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-accounts-logic |
Malicious release: Malicious code in checkout-accounts-holder (npm) MAL-2026-12541 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-accounts-holder |
Malicious release: Malicious code in checkout-context (npm) MAL-2026-12550 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-context |
Malicious release: Malicious code in checkout-bnpl-logic (npm) MAL-2026-12545 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-bnpl-logic |
Malicious release: Malicious code in checkout-desktop-accounts (npm) MAL-2026-12553 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-desktop-accounts |
Malicious release: Malicious code in checkout-create-token (npm) MAL-2026-12552 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-create-token |
Malicious release: Malicious code in checkout-base-test (npm) MAL-2026-12544 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-base-test |
Malicious release: Malicious code in checkout-desktop-cashback (npm) MAL-2026-12555 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-desktop-cashback |
Malicious release: Malicious code in checkout-desktop-input-card (npm) MAL-2026-12556 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-desktop-input-card |
Malicious release: Malicious code in checkout-checkout-test-block-aff (npm) MAL-2026-12547 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-checkout-test-block-aff |
Malicious release: Malicious code in checkout-commit-pos-order-am (npm) MAL-2026-12548 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-commit-pos-order-am |
Malicious release: Malicious code in checkout-confirm-pos-order-sms-am (npm) MAL-2026-12549 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-confirm-pos-order-sms-am |
Malicious release: Malicious code in checkout-desktop-bnpl (npm) MAL-2026-12554 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-desktop-bnpl |
Malicious release: Malicious code in checkout-desktop-legal (npm) MAL-2026-12557 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-desktop-legal |
Malicious release: Malicious code in checkout-get-installment-client-agreement-am (npm) MAL-2026-12564 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-get-installment-client-agreement-am |
Malicious release: Malicious code in checkout-desktop-pay-button (npm) MAL-2026-12558 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-desktop-pay-button |
Malicious release: Malicious code in checkout-legal-logic (npm) MAL-2026-12569 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-legal-logic |
Malicious release: Malicious code in checkout-desktop-pay-widget (npm) MAL-2026-12559 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-desktop-pay-widget |
Malicious release: Malicious code in checkout-mobile-accounts (npm) MAL-2026-12570 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-mobile-accounts |
Malicious release: Malicious code in checkout-input-email-logic (npm) MAL-2026-12568 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-input-email-logic |
Malicious release: Malicious code in checkout-desktop-promocode (npm) MAL-2026-12560 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-desktop-promocode |
Malicious release: Malicious code in checkout-get-pos-documents-am (npm) MAL-2026-12565 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-get-pos-documents-am |
Malicious release: Malicious code in checkout-dolyame-logic (npm) MAL-2026-12562 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-dolyame-logic |