@uni-cli/cli (>=1.0.6 <=1.0.12), @uni-cli/init (=1.0.12) +1 more potentially affected by unknown CVE via fs-extar (=0.0.1-security)

fs-extar NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fs-extar and may be impacted: - @uni-cli/cli =1.0.6, =1.0.12 - @uni-cli/init =1.0.12 - hwsz-tools =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-21006...

Malicious code in release-it-nebula-init-scripts (npm)

The package release-it-nebula-init-scripts was found to contain malicious code...

Malicious code in jsonp-init-command-bunyan (npm)

The package jsonp-init-command-bunyan was found to contain malicious code...

Malicious code in pino-pretty-webdriver-manager-apollo-init (npm)

The package pino-pretty-webdriver-manager-apollo-init was found to contain malicious code...

MAL-2025-15618 Malicious code in betelgeuse-juno-mantle-init (npm)

The package betelgeuse-juno-mantle-init was found to contain malicious code...

MAL-2025-28464 Malicious code in orbit-parallax-init-canopus (npm)

The package orbit-parallax-init-canopus was found to contain malicious code...

MAL-2025-27145 Malicious code in nconf-venus-remark-init (npm)

The package nconf-venus-remark-init was found to contain malicious code...

Malicious code in interstellarmedium-init-rollup-electron-builder (npm)

The package interstellarmedium-init-rollup-electron-builder was found to contain malicious code...

Malicious code in elektra-entanglement-gulp-init (npm)

The package elektra-entanglement-gulp-init was found to contain malicious code...

Malicious code in postcss-loader-express-init-test (npm)

The package postcss-loader-express-init-test was found to contain malicious code...

MAL-2025-28927 Malicious code in pavo-init-sass-loader-nodejs (npm)

The package pavo-init-sass-loader-nodejs was found to contain malicious code...

MAL-2025-20929 Malicious code in framework-webdriver-manager-init-virgo (npm)

The package framework-webdriver-manager-init-virgo was found to contain malicious code...

MAL-2025-29305 Malicious code in pino-pretty-webdriver-manager-apollo-init (npm)

The package pino-pretty-webdriver-manager-apollo-init was found to contain malicious code...

MAL-2025-29136 Malicious code in phoebe-dotenv-safe-markdown-init (npm)

The package phoebe-dotenv-safe-markdown-init was found to contain malicious code...

CVE-2025-55159 vulnerabilities

Vulnerabilities for packages: linkerd-extension-init, linkerd2, uv, buck2, linkerd2-proxy, pixi, mdbook, shadowsocks-rust, zola, efs-utils...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: linkerd-extension-init, linkerd2, uv, buck2, linkerd2-proxy, pixi, mdbook, shadowsocks-rust, zola, efs-utils...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: jujutsu, linkerd-extension-init, uv, mdbook, zola, pixi, efs-utils, linkerd2, shadowsocks-rust, linkerd2-proxy, buck2...

CVE-2025-55159 vulnerabilities

Vulnerabilities for packages: jujutsu, linkerd-extension-init, uv, mdbook, zola, pixi, efs-utils, linkerd2, shadowsocks-rust, linkerd2-proxy, buck2...

Linux Distros Unpatched Vulnerability : CVE-2021-47598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: schcake: do not call cakedestroy from cakeinit qdiscs are not supposed to call their own...

Linux Distros Unpatched Vulnerability : CVE-2024-39296

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bonding: fix oops during rmmod rmmod bonding causes an oops ever since commit cc317ea3d927...