go-api-starter (>=0.0.0, <=1.3.0), redux-starter (>=0.0.0, <=1.1.0) potentially affected by unknown CVE via kik-starter (>=0.0.1, <=2.2.1)

kik-starter NPM version =0.0.1, =0.0.0, =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: GHSA-GV5J-C86Q-558Q...

Malicious code in kik-starter (npm)

The package kik-starter was found to contain malicious code. --- Credit: OpenSSF source...

kik (>=0.0.0, <=1.3.0), kik-starter (2.2.0) potentially affected by unknown CVE via install-module (>=0.2.0, <=1.1.0)

install-module NPM version =0.2.0, =0.0.0, =1.3.0 - kik-starter 2.2.0 Source cves: unknown CVE Source advisory: GHSA-9X87-JGF4-PQWX...

cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via config-doc (0.1.0)

config-doc NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on config-doc and may be impacted: - cli-form =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: GHSA-MHM5-VHWW-MRXC...

cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-qa (>=0.3.0, <=2.3.0)

cli-qa NPM version =0.3.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: GHSA-86Q4-HW7W-XP4H...

kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-form (0.1.4)

cli-form NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: GHSA-X9M5-PVWW-2559...

co.aurasphere.botmill:botmill-core (>=1.0.0, <=1.0.2), co.aurasphere.botmill:fb-botmill (>=2.0.0-rc1, <=2.0.0-rc3) +30 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.5.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - co.aurasphere.botmill:botmill-core =1.0.0, =2.0.0-rc1, =1.1,...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +11 more potentially affected by unknown CVE via new-struct (>=0.0.4, <=0.1.1)

new-struct NPM version =0.0.4, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27369...

cli-form (>=0.1.0, <=0.1.4), cli-qa (>=2.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via comma-list (>=0.0.0, <=0.0.1)

comma-list NPM version =0.0.0, =0.1.0, =2.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17400...

Malicious code in kik-starter (npm)

The package kik-starter was found to contain malicious code...

kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-form (0.1.4)

cli-form NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +2 more potentially affected by unknown CVE via on-key-press (0.0.0)

on-key-press NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on on-key-press and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28228...

kik (>=0.0.0, <=1.3.0), kik-starter (2.2.0) potentially affected by unknown CVE via install-module (>=0.2.0, <=1.1.0)

install-module NPM version =0.2.0, =0.0.0, =1.3.0 - kik-starter 2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23249...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via read-cli-input (1.0.1)

read-cli-input NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on read-cli-input and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31878...

go-api-starter (>=0.0.0, <=1.3.0), redux-starter (>=0.0.0, <=1.1.0) potentially affected by unknown CVE via kik-starter (>=0.0.1, <=2.2.1)

kik-starter NPM version =0.0.1, =0.0.0, =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24454...

MAL-2025-24454 Malicious code in kik-starter (npm)

The package kik-starter was found to contain malicious code...

kik (>=0.2.0, <=1.3.0) potentially affected by unknown CVE via to-class-name (0.0.0)

to-class-name NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-class-name and may be impacted: - kik =0.2.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37001...

cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-qa (>=0.3.0, <=2.3.0)

cli-qa NPM version =0.3.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17116...

cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via config-doc (0.1.0)

config-doc NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on config-doc and may be impacted: - cli-form =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17474...

co.aurasphere.botmill:botmill-core (>=1.0.0, <=1.0.2), co.aurasphere.botmill:fb-botmill (>=2.0.0-rc1, <=2.0.0-rc3) +7 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.2.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - co.aurasphere.botmill:botmill-core =1.0.0, =2.0.0-rc1, =2.0.0,...