Malicious code in vue-cli-nb-no (npm)

The package vue-cli-nb-no was found to contain malicious code...

Malicious code in trucks-cli (npm)

The package trucks-cli was found to contain malicious code...

brick (=0.0.0), brick-node (>=0.0.8 <=0.0.17) +30 more potentially affected by unknown CVE via show-help (>=0.0.0 <=2.0.1)

show-help NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =1.1.0, =1.1.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33162...

@uni-cli/cli (>=1.0.6 <=1.0.12), @uni-cli/init (=1.0.12) +1 more potentially affected by unknown CVE via fs-extar (=0.0.1-security)

fs-extar NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fs-extar and may be impacted: - @uni-cli/cli =1.0.6, =1.0.12 - @uni-cli/init =1.0.12 - hwsz-tools =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-21006...

change-object (=0.0.0), cli-qa (=2.0.0) +7 more potentially affected by unknown CVE via run-serially (=0.0.0)

run-serially NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on run-serially and may be impacted: - change-object =0.0.0 - cli-qa =2.0.0 - comma-list =0.0.0 - fd-select =1.0.0 - frp-tick =1.0.0 - innkeeper =1.0.4 - limited-parallel-loop...

ahmedraza-atm (>=2.0.0 <=2.0.3), cli-03-todo-list (=1.0.0) +3 more potentially affected by unknown CVE via chlak (=0.0.1-security)

chlak NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chlak and may be impacted: - ahmedraza-atm =2.0.0, =1.0.0, =1.0.0, =1.0.1 - todo-list-with-anila-waqar =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16991...

luis-reddit-cli (=1.0.0), md-links-larissadepaula (>=0.2.0 <=0.2.1) +1 more potentially affected by unknown CVE via node-fecth (=0.0.1-security)

node-fecth NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-fecth and may be impacted: - luis-reddit-cli =1.0.0 - md-links-larissadepaula =0.2.0, =0.0.37, =0.0.40 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27...

kik (>=0.0.0 <=1.3.0) potentially affected by unknown CVE via cli-form (=0.1.4)

cli-form NPM version =0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...

cli-form (>=0.1.0 <=0.1.4), cli-qa (>=2.0.0 <=2.3.0) +1 more potentially affected by unknown CVE via comma-list (>=0.0.0 <=0.0.1)

comma-list NPM version =0.0.0, =0.1.0, =2.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17400...

brick-node (>=0.0.0 <=0.0.17), tinkr-cli (>=0.0.1 <=0.0.9) potentially affected by unknown CVE via ignore-doc (>=0.0.0 <=0.0.1)

ignore-doc NPM version =0.0.0, =0.0.0, =0.0.1, =0.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23012...

Malicious code in respace-cli (npm)

The package respace-cli was found to contain malicious code...

swagger-koa88 (>=1.0.2 <=1.0.5-0), windows10-electron-vibrancy (>=1.0.0 <=1.0.1) +1 more potentially affected by unknown CVE via coffe-script (=0.0.1-security)

coffe-script NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on coffe-script and may be impacted: - swagger-koa88 =1.0.2, =1.0.0, =1.0.5, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17263...

my-testutil (=1.0.1), storm-test (=0.0.1) +1 more potentially affected by unknown CVE via wepack-cli (=0.0.1-security)

wepack-cli NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wepack-cli and may be impacted: - my-testutil =1.0.1 - storm-test =0.0.1 - stormydb =0.1.1, =0.5.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39082...

cli-form (>=0.0.0 <=0.1.4), kik (>=0.0.0 <=1.3.0) potentially affected by unknown CVE via config-doc (=0.1.0)

config-doc NPM version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on config-doc and may be impacted: - cli-form =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17474...

Malicious code in avalon-cli (npm)

The package avalon-cli was found to contain malicious code...

Malicious code in avalon-cli-build-ios (npm)

The package avalon-cli-build-ios was found to contain malicious code...

Malicious code in fazilet-cli (npm)

The package fazilet-cli was found to contain malicious code...

Malicious code in shop-minis-cli (npm)

The package shop-minis-cli was found to contain malicious code...

Malicious code in angular-cli-library-builder (npm)

The package angular-cli-library-builder was found to contain malicious code...

Malicious code in angular-cli-autoprefixer (npm)

The package angular-cli-autoprefixer was found to contain malicious code...