@uni-cli/cli (>=1.0.6 <=1.0.12), @uni-cli/init (=1.0.12) +1 more potentially affected by unknown CVE via fs-extar (=0.0.1-security)

fs-extar NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fs-extar and may be impacted: - @uni-cli/cli =1.0.6, =1.0.12 - @uni-cli/init =1.0.12 - hwsz-tools =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-21006...

Malicious code in cli-plugin-ngrok (npm)

The package cli-plugin-ngrok was found to contain malicious code...

Malicious code in bnrn-gloabal-cli (npm)

The package bnrn-gloabal-cli was found to contain malicious code...

Malicious code in groots-cli (npm)

The package groots-cli was found to contain malicious code...

Malicious code in cli-plugin-migrate (npm)

The package cli-plugin-migrate was found to contain malicious code...

my-testutil (=1.0.1), storm-test (=0.0.1) +1 more potentially affected by unknown CVE via wepack-cli (=0.0.1-security)

wepack-cli NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wepack-cli and may be impacted: - my-testutil =1.0.1 - storm-test =0.0.1 - stormydb =0.1.1, =0.5.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39082...

Malicious code in spectron-cli-duplex-unuk (npm)

The package spectron-cli-duplex-unuk was found to contain malicious code...

Malicious code in adform-cli-test (npm)

The package adform-cli-test was found to contain malicious code...

cli-form (>=0.0.0 <=0.1.4), cli-qa (>=0.0.0 <=2.3.0) +2 more potentially affected by unknown CVE via on-key-press (=0.0.0)

on-key-press NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on on-key-press and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28228...

Malicious code in h1-cli-device-browser (npm)

The package h1-cli-device-browser was found to contain malicious code...

h1-cli-device-browser (>=1.0.1-alpha.0 <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0 <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-iam-project-select (=1.0.1-alpha.1)

h1-cli-ext-iam-project-select NPM version =1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-iam-project-select and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE...

Malicious code in fin-vue-cli (npm)

The package fin-vue-cli was found to contain malicious code...

Malicious code in cli-janus-norma-lightyear (npm)

The package cli-janus-norma-lightyear was found to contain malicious code...

Malicious code in h1-cli-ext-root-openapi-generator (npm)

The package h1-cli-ext-root-openapi-generator was found to contain malicious code...

Malicious code in adform-cli-build (npm)

The package adform-cli-build was found to contain malicious code...

Malicious code in bnrn-cli-test (npm)

The package bnrn-cli-test was found to contain malicious code...

Malicious code in planckscale-mira-configstore-cli (npm)

The package planckscale-mira-configstore-cli was found to contain malicious code...

Malicious code in gifhorse-cli (npm)

The package gifhorse-cli was found to contain malicious code...

Malicious code in generator-unicorn-cli (npm)

The package generator-unicorn-cli was found to contain malicious code...

Malicious code in sunruse-influx-cli (npm)

The package sunruse-influx-cli was found to contain malicious code...