swagger-koa88 (>=1.0.2, <=1.0.5-0), windows10-electron-vibrancy (>=1.0.0, <=1.0.1) +1 more potentially affected by unknown CVE via coffe-script (0.0.1-security)

coffe-script NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on coffe-script and may be impacted: - swagger-koa88 =1.0.2, =1.0.0, =1.0.5, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17263...

Malicious code in j2-cli (npm)

The package j2-cli was found to contain malicious code...

Malicious code in avalon-cli-run-ios (npm)

The package avalon-cli-run-ios was found to contain malicious code...

MAL-2025-38667 Malicious code in vue-cli-nb-no (npm)

The package vue-cli-nb-no was found to contain malicious code...

MAL-2025-29351 Malicious code in pkg-dependents-cli (npm)

The package pkg-dependents-cli was found to contain malicious code...

MAL-2025-14087 Malicious code in adform-cli-test (npm)

The package adform-cli-test was found to contain malicious code...

MAL-2025-17114 Malicious code in cli-plugin-ngrok (npm)

The package cli-plugin-ngrok was found to contain malicious code...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via read-cli-input (1.0.1)

read-cli-input NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on read-cli-input and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31878...

Malicious code in config-management-cli (npm)

The package config-management-cli was found to contain malicious code...

MAL-2025-20562 Malicious code in fin-vue-cli (npm)

The package fin-vue-cli was found to contain malicious code...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) +2 more potentially affected by unknown CVE via h1-cli-core (1.0.1-alpha.1)

h1-cli-core NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-core and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Sourc...

MAL-2025-15170 Malicious code in avalon-cli-download (npm)

The package avalon-cli-download was found to contain malicious code...

MAL-2025-24759 Malicious code in kopul-cli (npm)

The package kopul-cli was found to contain malicious code...

Malicious code in growthbook-cli (npm)

The package growthbook-cli was found to contain malicious code...

Malicious code in avalon-cli-prepare-ios (npm)

The package avalon-cli-prepare-ios was found to contain malicious code...

MAL-2025-31878 Malicious code in read-cli-input (npm)

The package read-cli-input was found to contain malicious code...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-openapi-generator (1.0.1-alpha.1)

h1-cli-ext-root-openapi-generator NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-openapi-generator and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unkno...

Malicious code in fin-vue-cli (npm)

The package fin-vue-cli was found to contain malicious code...

MAL-2025-32031 Malicious code in rehype-config-gravitationalwave-cli (npm)

The package rehype-config-gravitationalwave-cli was found to contain malicious code...

MAL-2025-10936 Malicious code in @zalastax/nolb-cliy (npm)

The package @zalastax/nolb-cliy was found to contain malicious code...