node-27285e17 (=1.0.0) potentially affected by unknown CVE via undesrcore (=0.0.1-security)

undesrcore NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on undesrcore and may be impacted: - node-27285e17 =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37738...

@luxiaodan/el-selection-tree-table (=1.0.3) potentially affected by unknown CVE via lodsah (=0.0.1-security)

lodsah NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodsah and may be impacted: - @luxiaodan/el-selection-tree-table =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25516...

shell-jobs (>=0.1.0 <=0.1.1) potentially affected by unknown CVE via next-time (>=0.0.0 <=0.0.1)

next-time NPM version =0.0.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27399...

clicommandcources (=1.0.1) potentially affected by unknown CVE via commandr (=0.0.1-security)

commandr NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commandr and may be impacted: - clicommandcources =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17409...

ourtunes (>=0.0.0 <=1.1.0), play-url (>=0.0.2 <=0.0.5) potentially affected by unknown CVE via rdio-js-api (=0.0.6)

rdio-js-api NPM version =0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on rdio-js-api and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31754...

mycoin (=1.0.0), simple-blockchain-implement (>=1.0.0 <=1.0.4) potentially affected by unknown CVE via crytpo-js (=0.0.1-security)

crytpo-js NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin =1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17770...

declarative-js (>=0.0.0 <=0.0.2) potentially affected by unknown CVE via join-params (=0.0.0)

join-params NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on join-params and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23839...

000tea (=1.4.5), 00tea (=1.4.4) +838 more potentially affected by unknown CVE via name (=0.0.2)

name NPM version =0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on name and may be impacted: - 000tea =1.4.5 - 00tea =1.4.4 - 01q =1.5.1 - 032we =1.5.7 - 0tea =1.4.3 - 123qaz =1.1.1 - 12we =1.6.9 - 12wea =1.5.5 - 1qwe =1.4.6 - 1qwer =1.4.7 - 1qwer...

brick (=0.0.0), brick-node (>=0.0.0 <=0.0.17) potentially affected by unknown CVE via mime-of (=0.1.0)

mime-of NPM version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mime-of and may be impacted: - brick =0.0.0 - brick-node =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26376...

brick-node (>=0.0.0 <=0.0.17) potentially affected by unknown CVE via categorize-files (=0.0.1)

categorize-files NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on categorize-files and may be impacted: - brick-node =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16663...

snsadmin (=1.0.0) potentially affected by unknown CVE via soket.io (=0.0.1-security)

soket.io NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on soket.io and may be impacted: - snsadmin =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33611...

react-endless (>=1.0.4 <=1.0.6), react-templet (>=1.0.0 <=1.0.3) potentially affected by unknown CVE via epress (=0.0.1-security)

epress NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epress and may be impacted: - react-endless =1.0.4, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19723...

@naologic/design (>=1.0.5 <=1.1.4) potentially affected by unknown CVE via iodash (=0.0.1-security)

iodash NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on iodash and may be impacted: - @naologic/design =1.0.5, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23307...

ourtunes (>=0.0.0 <=1.1.0) potentially affected by unknown CVE via play-url (=0.0.5)

play-url NPM version =0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on play-url and may be impacted: - ourtunes =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29381...

generator-anyms-ms (>=1.0.7 <=2.0.4), generator-diy (=1.0.0) +1 more potentially affected by unknown CVE via yoeman-generator (=0.0.1-security)

yoeman-generator NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on yoeman-generator and may be impacted: - generator-anyms-ms =1.0.7, =2.0.4 - generator-diy =1.0.0 - generator-owngen =1.0.0 Source cves: unknown CVE Source...

@baosight/xinrong (>=0.0.36 <=0.0.37), wypulldom (=1.0.0) potentially affected by unknown CVE via jqeury (=0.0.1-security)

jqeury NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jqeury and may be impacted: - @baosight/xinrong =0.0.36, =0.0.37 - wypulldom =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23891...

custom_ww (=1.0.0) potentially affected by unknown CVE via lodasn (=0.0.1-security)

lodasn NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodasn and may be impacted: - customww =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25510...

memoize-with-leveldb (>=0.0.0 <=0.0.1), radio-paradise-api (>=0.0.0 <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0 <=2.0.0)

level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25200...

ni3ba45_marksheet (=1.0.8), zain-khan-179-simple-calculator (>=1.0.0 <=2.1.0) potentially affected by unknown CVE via cahlk (=0.0.1-security)

cahlk NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on cahlk and may be impacted: - ni3ba45marksheet =1.0.8 - zain-khan-179-simple-calculator =1.0.0, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16430...

gezi-core (>=0.0.0 <=0.0.2) potentially affected by unknown CVE via unique-now (=0.0.1)

unique-now NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on unique-now and may be impacted: - gezi-core =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37825...