Malicious code in shop-minis-cli (npm)

The package shop-minis-cli was found to contain malicious code...

Malicious code in valueappz-cli (npm)

The package valueappz-cli was found to contain malicious code...

Malicious code in angular-cli-autoprefixer (npm)

The package angular-cli-autoprefixer was found to contain malicious code...

Malicious code in avalon-cli (npm)

The package avalon-cli was found to contain malicious code...

Malicious code in avalon-cli-console (npm)

The package avalon-cli-console was found to contain malicious code...

Malicious code in bangscripts-cli (npm)

The package bangscripts-cli was found to contain malicious code...

Malicious code in bartok-cli (npm)

The package bartok-cli was found to contain malicious code...

Malicious code in bnrn-cli (npm)

The package bnrn-cli was found to contain malicious code...

Malicious code in bnrn-cli-snapshot (npm)

The package bnrn-cli-snapshot was found to contain malicious code...

Malicious code in bulma-dione-celeste-cli (npm)

The package bulma-dione-celeste-cli was found to contain malicious code...

Malicious code in cli-form (npm)

The package cli-form was found to contain malicious code...

Malicious code in cli-ini-fetch-geckodriver (npm)

The package cli-ini-fetch-geckodriver was found to contain malicious code...

Malicious code in cli-plugin-graphql (npm)

The package cli-plugin-graphql was found to contain malicious code...

Malicious code in cli-theme (npm)

The package cli-theme was found to contain malicious code...

Malicious code in config-management-cli (npm)

The package config-management-cli was found to contain malicious code...

MAL-2025-22080 Malicious code in h1-cli-ext-root-auth (npm)

The package h1-cli-ext-root-auth was found to contain malicious code...

luis-reddit-cli (1.0.0), md-links-larissadepaula (>=0.2.0, <=0.2.1) +1 more potentially affected by unknown CVE via node-fecth (0.0.1-security)

node-fecth NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-fecth and may be impacted: - luis-reddit-cli 1.0.0 - md-links-larissadepaula =0.2.0, =0.0.37, =0.0.40 Source cves: unknown CVE Source advisory: OSV:MAL-2025-2761...

brick-node (>=0.0.0, <=0.0.17), change-object (0.0.0) +9 more potentially affected by unknown CVE via pause-function (0.0.1)

pause-function NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pause-function and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 - stream-format 0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28923...

brick-node (>=0.0.0, <=0.0.17), tinkr-cli (>=0.0.1, <=0.0.9) potentially affected by unknown CVE via ignore-doc (>=0.0.0, <=0.0.1)

ignore-doc NPM version =0.0.0, =0.0.0, =0.0.1, =0.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23012...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) +2 more potentially affected by unknown CVE via h1-cli-core (1.0.1-alpha.1)

h1-cli-core NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-core and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Sourc...