Malicious code in front-end-cli (npm)

The package front-end-cli was found to contain malicious code...

Malicious code in fusion-dev-cli (npm)

The package fusion-dev-cli was found to contain malicious code...

Malicious code in growthbook-cli (npm)

The package growthbook-cli was found to contain malicious code...

Malicious code in h1-cli-ext-iam-project-select (npm)

The package h1-cli-ext-iam-project-select was found to contain malicious code...

Malicious code in ipi-cli (npm)

The package ipi-cli was found to contain malicious code...

Malicious code in loom-cli (npm)

The package loom-cli was found to contain malicious code...

Malicious code in mfp-cli (npm)

The package mfp-cli was found to contain malicious code...

Malicious code in my-cli-app (npm)

The package my-cli-app was found to contain malicious code...

Malicious code in polaris-cli (npm)

The package polaris-cli was found to contain malicious code...

Malicious code in read-cli-input (npm)

The package read-cli-input was found to contain malicious code...

Malicious code in respace-cli (npm)

The package respace-cli was found to contain malicious code...

Malicious code in subtitles-cli (npm)

The package subtitles-cli was found to contain malicious code...

Malicious code in trucks-cli (npm)

The package trucks-cli was found to contain malicious code...

Malicious code in vue-cli-nb-no (npm)

The package vue-cli-nb-no was found to contain malicious code...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +2 more potentially affected by unknown CVE via on-key-press (0.0.0)

on-key-press NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on on-key-press and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28228...

cli-form (>=0.1.0, <=0.1.4), cli-qa (>=2.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via comma-list (>=0.0.0, <=0.0.1)

comma-list NPM version =0.0.0, =0.1.0, =2.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17400...

MAL-2025-20250 Malicious code in faustwp-cli (npm)

The package faustwp-cli was found to contain malicious code...

my-testutil (1.0.1), storm-test (0.0.1) +1 more potentially affected by unknown CVE via wepack-cli (0.0.1-security)

wepack-cli NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wepack-cli and may be impacted: - my-testutil 1.0.1 - storm-test 0.0.1 - stormydb =0.1.1, =0.5.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39082...

kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-form (0.1.4)

cli-form NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-openapi-generator (1.0.1-alpha.1)

h1-cli-ext-root-openapi-generator NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-openapi-generator and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unkno...