fox (=0.0.8), lowkick (>=0.0.1 <=0.1.0) +2 more potentially affected by unknown CVE via combiner (=1.2.1)

combiner NPM version =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on combiner and may be impacted: - fox =0.0.8 - lowkick =0.0.1, =1.1.0, =0.3.1, =0.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17379...

fox (>=0.0.7 <=0.0.8), one (>=1.7.0 <=2.5.2) +2 more potentially affected by unknown CVE via boxcars (>=0.0.6 <=2.0.0)

boxcars NPM version =0.0.6, =0.0.7, =1.7.0, =0.0.1, =0.3.1, =0.6.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16042...

brick (=0.0.0), duo-parse (=0.4.0) +4 more potentially affected by unknown CVE via memoize-sync (>=0.0.2 <=2.0.0)

memoize-sync NPM version =0.0.2, =0.0.9, =5.0.0, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26179...

brick (=0.0.0), brick-node (>=0.0.8 <=0.0.17) +30 more potentially affected by unknown CVE via show-help (>=0.0.0 <=2.0.1)

show-help NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =1.1.0, =1.1.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33162...

MAL-2025-20840 Malicious code in fox-undertow-wmc930-project (npm)

The package fox-undertow-wmc930-project was found to contain malicious code...

MAL-2025-20837 Malicious code in fox-rose-jzq209-project (npm)

The package fox-rose-jzq209-project was found to contain malicious code...

MAL-2025-20836 Malicious code in fox-nugget-spj176-project (npm)

The package fox-nugget-spj176-project was found to contain malicious code...

MAL-2025-40642 Malicious code in yucca-fox-xey091-project (npm)

The package yucca-fox-xey091-project was found to contain malicious code...

Malicious code in fox-undertow-xry056-project (npm)

The package fox-undertow-xry056-project was found to contain malicious code...

Malicious code in fox-meadow-nhx407-project (npm)

The package fox-meadow-nhx407-project was found to contain malicious code...

Malicious code in fox-undertow-wmc930-project (npm)

The package fox-undertow-wmc930-project was found to contain malicious code...

Malicious code in fox-zebra-lqc707-project (npm)

The package fox-zebra-lqc707-project was found to contain malicious code...

Malicious code in fox-dove-zdr554-project (npm)

The package fox-dove-zdr554-project was found to contain malicious code...

Malicious code in fox-rose-jzq209-project (npm)

The package fox-rose-jzq209-project was found to contain malicious code...

MAL-2025-20834 Malicious code in fox-mist-jeo648-project (npm)

The package fox-mist-jeo648-project was found to contain malicious code...

MAL-2025-20839 Malicious code in fox-tundra-vjc448-project (npm)

The package fox-tundra-vjc448-project was found to contain malicious code...

MAL-2025-20833 Malicious code in fox-meadow-nhx407-project (npm)

The package fox-meadow-nhx407-project was found to contain malicious code...

MAL-2025-20825 Malicious code in fox-arctic-qmu744-project (npm)

The package fox-arctic-qmu744-project was found to contain malicious code...

MAL-2025-20841 Malicious code in fox-undertow-xry056-project (npm)

The package fox-undertow-xry056-project was found to contain malicious code...

MAL-2025-20830 Malicious code in fox-grove-eyi798-project (npm)

The package fox-grove-eyi798-project was found to contain malicious code...