Malicious code in h1-cli-ext-root-openapi-generator (npm)

The package h1-cli-ext-root-openapi-generator was found to contain malicious code...

Malicious code in bnrn-cli-test (npm)

The package bnrn-cli-test was found to contain malicious code...

Malicious code in avalon-cli-server (npm)

The package avalon-cli-server was found to contain malicious code...

Malicious code in cli-jbook-2023-els (npm)

The package cli-jbook-2023-els was found to contain malicious code...

Malicious code in gifhorse-cli (npm)

The package gifhorse-cli was found to contain malicious code...

Malicious code in generator-unicorn-cli (npm)

The package generator-unicorn-cli was found to contain malicious code...

Malicious code in planckscale-mira-configstore-cli (npm)

The package planckscale-mira-configstore-cli was found to contain malicious code...

Malicious code in cli-plugin-migrate (npm)

The package cli-plugin-migrate was found to contain malicious code...

Malicious code in telus-myaccount-cli (npm)

The package telus-myaccount-cli was found to contain malicious code...

Malicious code in pkg-dependents-cli (npm)

The package pkg-dependents-cli was found to contain malicious code...

Malicious code in cli-support (npm)

The package cli-support was found to contain malicious code...

Malicious code in avalon-cli-prepare-ios (npm)

The package avalon-cli-prepare-ios was found to contain malicious code...

swagger-koa88 (>=1.0.2, <=1.0.5-0), windows10-electron-vibrancy (>=1.0.0, <=1.0.1) +1 more potentially affected by unknown CVE via coffe-script (0.0.1-security)

coffe-script NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on coffe-script and may be impacted: - swagger-koa88 =1.0.2, =1.0.0, =1.0.5, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17263...

change-object (0.0.0), cli-qa (2.0.0) +7 more potentially affected by unknown CVE via filter-stack (0.0.0)

filter-stack NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on filter-stack and may be impacted: - change-object 0.0.0 - cli-qa 2.0.0 - comma-list 0.0.0 - fd-select 1.0.0 - frp-tick 1.0.0 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 ...

cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-qa (>=0.3.0, <=2.3.0)

cli-qa NPM version =0.3.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17116...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via read-cli-input (1.0.1)

read-cli-input NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on read-cli-input and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31878...

h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-auth (1.0.1-alpha.1)

h1-cli-ext-root-auth NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-auth and may be impacted: - h1-cli-device-node =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22080...

MAL-2025-26945 Malicious code in my-cli-app (npm)

The package my-cli-app was found to contain malicious code...

MAL-2025-14087 Malicious code in adform-cli-test (npm)

The package adform-cli-test was found to contain malicious code...

MAL-2025-33720 Malicious code in spectron-cli-duplex-unuk (npm)

The package spectron-cli-duplex-unuk was found to contain malicious code...