MAL-2025-21410 Malicious code in gifhorse-cli (npm)

The package gifhorse-cli was found to contain malicious code...

Malicious code in eslint-plugin-cli (npm)

The package eslint-plugin-cli was found to contain malicious code...

MAL-2025-22078 Malicious code in h1-cli-device-node (npm)

The package h1-cli-device-node was found to contain malicious code...

Malicious code in ember-cli-ui-element (npm)

The package ember-cli-ui-element was found to contain malicious code...

MAL-2025-17106 Malicious code in cli-h2-test (npm)

The package cli-h2-test was found to contain malicious code...

Malicious code in bnrn-cli (npm)

The package bnrn-cli was found to contain malicious code...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) +2 more potentially affected by unknown CVE via h1-cli-core (1.0.1-alpha.1)

h1-cli-core NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-core and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Sourc...

ahmedraza-atm (>=2.0.0, <=2.0.3), cli-03-todo-list (1.0.0) +3 more potentially affected by unknown CVE via chlak (0.0.1-security)

chlak NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chlak and may be impacted: - ahmedraza-atm =2.0.0, =1.0.0, =1.0.0, =1.0.1 - todo-list-with-anila-waqar 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16991...

brick-node (>=0.0.0, <=0.0.17), tinkr-cli (>=0.0.1, <=0.0.9) potentially affected by unknown CVE via ignore-doc (>=0.0.0, <=0.0.1)

ignore-doc NPM version =0.0.0, =0.0.0, =0.0.1, =0.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23012...

brick-node (>=0.0.0, <=0.0.17), change-object (0.0.0) +9 more potentially affected by unknown CVE via pause-function (0.0.1)

pause-function NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pause-function and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 - stream-format 0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28923...

Malicious code in avalon-cli (npm)

The package avalon-cli was found to contain malicious code...

Malicious code in bnrn-cli-snapshot (npm)

The package bnrn-cli-snapshot was found to contain malicious code...

Malicious code in avalon-cli-console (npm)

The package avalon-cli-console was found to contain malicious code...

Malicious code in phoebe-cli-rigel-io (npm)

The package phoebe-cli-rigel-io was found to contain malicious code...

MAL-2025-15913 Malicious code in bnrn-cli-test (npm)

The package bnrn-cli-test was found to contain malicious code...

MAL-2025-17107 Malicious code in cli-hydrogen (npm)

The package cli-hydrogen was found to contain malicious code...

MAL-2025-17116 Malicious code in cli-qa (npm)

The package cli-qa was found to contain malicious code...

MAL-2025-17104 Malicious code in cli-cressida-tool-supercluster (npm)

The package cli-cressida-tool-supercluster was found to contain malicious code...

MAL-2025-17109 Malicious code in cli-janus-norma-lightyear (npm)

The package cli-janus-norma-lightyear was found to contain malicious code...

Malicious code in h1-cli-ext-storage-vault (npm)

The package h1-cli-ext-storage-vault was found to contain malicious code...