Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in constructor-blocks-landings (npm) MAL-2026-12661 | Malicious | Not scored | 05 Aug, 2026 | npm constructor-blocks-landings |
Malicious release: Malicious code in custom-plugins-request-factory (npm) MAL-2026-12668 | Malicious | Not scored | 05 Aug, 2026 | npm custom-plugins-request-factory |
Malicious release: Malicious code in ded-ps-ded-ps-core (npm) MAL-2026-12673 | Malicious | Not scored | 05 Aug, 2026 | npm ded-ps-ded-ps-core |
Malicious release: Malicious code in ded-pwa-bnpl-forms-demo (npm) MAL-2026-12675 | Malicious | Not scored | 05 Aug, 2026 | npm ded-pwa-bnpl-forms-demo |
Malicious release: Malicious code in fa-mcp-sdk (npm) MAL-2026-12789 | Malicious | Not scored | 05 Aug, 2026 | npm fa-mcp-sdk |
Malicious release: Malicious code in ded-aa-liza-ui-components (npm) MAL-2026-12672 | Malicious | Not scored | 05 Aug, 2026 | npm ded-aa-liza-ui-components |
Malicious release: Malicious code in ded-ps-events-ded-ps-events-core (npm) MAL-2026-12674 | Malicious | Not scored | 05 Aug, 2026 | npm ded-ps-events-ded-ps-events-core |
Malicious release: Malicious code in delivery-ci-microforms (npm) MAL-2026-12676 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-microforms |
Malicious release: Malicious code in delivery-ci-pipeline-rules (npm) MAL-2026-12678 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-pipeline-rules |
Malicious release: Malicious code in delivery-ci-notify (npm) MAL-2026-12677 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-notify |
Malicious release: Malicious code in delivery-ci-unit (npm) MAL-2026-12684 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-unit |
Malicious release: Malicious code in delivery-ci-tech-holder (npm) MAL-2026-12683 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-tech-holder |
Malicious release: Malicious code in delivery-ci-validate (npm) MAL-2026-12688 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-validate |
Malicious release: Malicious code in delivery-ci-quality (npm) MAL-2026-12679 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-quality |
Malicious release: Malicious code in delivery-ci-sage (npm) GHSA-xrcg-488c-pjp5, MAL-2026-12680 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-sage |
Malicious release: Malicious code in delivery-ci-validate-tinkoff-fb (npm) MAL-2026-12689 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-validate-tinkoff-fb |
Malicious release: Malicious code in delivery-ci-upgrade-form (npm) MAL-2026-12686 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-upgrade-form |
Malicious release: Malicious code in delivery-ci-storyshots (npm) MAL-2026-12682 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-storyshots |
Malicious release: Malicious code in delivery-ci-update-gitlab (npm) GHSA-j9fh-75xr-wfjx, MAL-2026-12685 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-update-gitlab |
Malicious release: Malicious code in delivery-ci-storybook (npm) GHSA-vjwx-6r34-p6jx, MAL-2026-12681 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-storybook |
Malicious release: Malicious code in delivery-ci-upgrade-from (npm) GHSA-g3mf-6c5f-qphf, MAL-2026-12687 | Malicious | Not scored | 05 Aug, 2026 | npm delivery-ci-upgrade-from |
Malicious release: Malicious code in devplatform-api-v2-resource-mock (npm) GHSA-wq78-cfvp-hw65, MAL-2026-12695 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-api-v2-resource-mock |
Malicious release: Malicious code in devplatform-api-endpoint (npm) MAL-2026-12692 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-api-endpoint |
Malicious release: Malicious code in devplatform-api-v2-endpoint (npm) MAL-2026-12694 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-api-v2-endpoint |
Malicious release: Malicious code in devplatform-api-v1-endpoint (npm) MAL-2026-12693 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-api-v1-endpoint |
Malicious release: Malicious code in devplatform-api-v2-resources-metadata (npm) MAL-2026-12697 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-api-v2-resources-metadata |
Malicious release: Malicious code in devplatform-api-clients (npm) GHSA-rphm-c9jq-j4f6, MAL-2026-12691 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-api-clients |
Malicious release: Malicious code in devplatform-cli (npm) MAL-2026-12699 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-cli |
Malicious release: Malicious code in devplatform-api-v2-resources (npm) MAL-2026-12696 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-api-v2-resources |
Malicious release: Malicious code in devplatform-auth-client (npm) GHSA-9p7w-3382-c43r, MAL-2026-12698 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-auth-client |
Malicious release: Malicious code in devplatform-cli-plugin-test (npm) MAL-2026-12703 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-cli-plugin-test |
Malicious release: Malicious code in devplatform-confirm-input (npm) MAL-2026-12705 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-confirm-input |
Malicious release: Malicious code in devplatform-cli-contracts (npm) MAL-2026-12700 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-cli-contracts |
Malicious release: Malicious code in devplatform-create-nx-spa (npm) MAL-2026-12707 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-create-nx-spa |
Malicious release: Malicious code in devplatform-cli-spa (npm) MAL-2026-12704 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-cli-spa |
Malicious release: Malicious code in devplatform-cli-plugin-lint (npm) GHSA-m3ch-p9vx-grpc, MAL-2026-12702 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-cli-plugin-lint |
Malicious release: Malicious code in devplatform-data-table (npm) GHSA-f95m-xx4x-37cx, MAL-2026-12708 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-data-table |
Malicious release: Malicious code in devplatform-hooks (npm) MAL-2026-12711 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-hooks |
Malicious release: Malicious code in devplatform-di (npm) MAL-2026-12709 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-di |
Malicious release: Malicious code in devplatform-http-client (npm) GHSA-r433-38gp-v38v, MAL-2026-12712 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-http-client |
Malicious release: Malicious code in devplatform-cli-plugin-generator (npm) MAL-2026-12701 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-cli-plugin-generator |
Malicious release: Malicious code in devplatform-cra-template (npm) MAL-2026-12706 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-cra-template |
Malicious release: Malicious code in devplatform-eslint-plugin-nx (npm) MAL-2026-12710 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-eslint-plugin-nx |
Malicious release: Malicious code in devplatform-markdown (npm) MAL-2026-12720 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-markdown |
Malicious release: Malicious code in devplatform-nx-pvm (npm) MAL-2026-12725 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-nx-pvm |
Malicious release: Malicious code in devplatform-npm-versions-checker (npm) GHSA-pvjr-x84q-9wv8, MAL-2026-12721 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-npm-versions-checker |
Malicious release: Malicious code in devplatform-nx-gle (npm) MAL-2026-12723 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-nx-gle |
Malicious release: Malicious code in devplatform-nx-react (npm) GHSA-prvc-p92j-5q2x, MAL-2026-12726 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-nx-react |
Malicious release: Malicious code in devplatform-iam-client (npm) MAL-2026-12715 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-iam-client |
Malicious release: Malicious code in devplatform-jscodeshift-plugin (npm) MAL-2026-12717 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-jscodeshift-plugin |