@0xgg/echomd (>=1.0.2, <=1.0.4), @ajuhos/malloy-tests (>=0.0.332, <=0.0.334) +175 more potentially affected by CVE-2025-59840 via vega-expression (>=5.0.1, <=5.1.2)

vega-expression NPM version =5.0.1, =1.0.2, =0.0.332, =0.0.332, =1.1.5, =0.4.1-canary.195, =0.1.0, =3.0.0-alpha.2, =0.0.2, =0.0.1, =0.0.5, =0.0.1, =0.0.8 and more Source cves: CVE-2025-59840 Source advisory: SNYK:JS-VEGAEXPRESSION-13961124...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +35 more potentially affected by CVE-2025-61925 +1 more via astro (>=5.0.0-beta.5, <=5.15.1)

astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.28, =0.0.40 and more Source cves: CVE-2025-61925, CVE-2025-64525 Source advisory: SNYK:JS-ASTRO-13961342...

org.webjars.bowergithub.lostinbrittany:granite-yaml (1.1.0) potentially affected by CVE-2025-64718 via org.webjars.bowergithub.nodeca:js-yaml (3.14.1)

org.webjars.bowergithub.nodeca:js-yaml MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.nodeca:js-yaml and may be impacted: - org.webjars.bowergithub.lostinbrittany:granite-yaml 1.1.0 Source cves:...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21373 more potentially affected by CVE-2025-64718 via js-yaml (>=3.0.0, <=3.14.1)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2025-64718 Source advisory: SNYK:JS-JSYAML-13961110...

02.aula (1.0.0), 0xrtest (1.0.0) +8090 more potentially affected by CVE-2025-64718 via js-yaml (>=4.0.0, <=4.1.0)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 - @10abdullahbutt/nestjs-boilerplate 0.0.1 and more Source cves: CVE-2025-64718 Source advisory: SNYK:JS-JSYAML-13961110...

@akunsansan0/baso (1.0.0), @akunsansan0/biru (1.1.4) +284 more potentially affected by unknown CVE via tea_nextgun (>=1.1.7, <=2.1.1)

teanextgun NPM version =1.1.7, =2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on teanextgun and may be impacted: - @akunsansan0/baso 1.0.0 - @akunsansan0/biru 1.1.4 - @akunsansan0/biru1 1.1.4 - @akunsansan0/biru10 1.1.4 - @akunsansan0/biru11 1.1.4...

@akunsansan0/pucukharum (>=1.1.4, <=2.1.1), pucukharum (2.1.1) potentially affected by unknown CVE via pucukharum (1.1.4)

pucukharum NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on pucukharum and may be impacted: - @akunsansan0/pucukharum =1.1.4, =2.1.1 - pucukharum 2.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181514...

@akunsansan0/tea_gunt99 (1.1.4) potentially affected by unknown CVE via tea_gunt99 (1.1.2)

teagunt99 NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on teagunt99 and may be impacted: - @akunsansan0/teagunt99 1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181569...

@akunsansan0/teagunz99 (>=1.1.2, <=1.1.4) potentially affected by unknown CVE via teagunz99 (1.0.0)

teagunz99 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on teagunz99 and may be impacted: - @akunsansan0/teagunz99 =1.1.2, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181574...

@akunsansan0/tea_guntry99 (1.1.5), tea_guntry99 (>=1.1.2, <=1.1.6) potentially affected by unknown CVE via tea_guntry99 (1.1.7)

teaguntry99 NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on teaguntry99 and may be impacted: - @akunsansan0/teaguntry99 1.1.5 - teaguntry99 =1.1.2, =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181570...

tea_gunfinal (>=1.1.2, <=1.1.5) potentially affected by unknown CVE via tea_gunfinal (1.1.6)

teagunfinal NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on teagunfinal and may be impacted: - teagunfinal =1.1.2, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181568...

bako5 (1.1.4), tea_gun (>=1.1.2, <=1.1.3) potentially affected by unknown CVE via tea_gun (1.1.4)

teagun NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teagun and may be impacted: - bako5 1.1.4 - teagun =1.1.2, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181567...

@akunsansan0/cewe (1.0.0), @akunsansan0/teaguntur99 (>=1.1.4, <=1.1.5) +10 more potentially affected by unknown CVE via teaguntur99 (1.1.4)

teaguntur99 NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teaguntur99 and may be impacted: - @akunsansan0/cewe 1.0.0 - @akunsansan0/teaguntur99 =1.1.4, =1.1.5 - @satria9897/air 1.0.0 - air1 1.1.0 - air10 1.1.0 - air2 1.1.0 - air3...

@akunsansan0/jorelat (1.0.0), @akunsansan0/jorelat1 (1.0.0) +31 more potentially affected by unknown CVE via teagunup99 (1.1.5)

teagunup99 NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on teagunup99 and may be impacted: - @akunsansan0/jorelat 1.0.0 - @akunsansan0/jorelat1 1.0.0 - @akunsansan0/jorelat10 1.0.0 - @akunsansan0/jorelat11 1.0.0 - @akunsansan0/jorelat...

@akunsansan0/pucuk10 (1.0.0), @akunsansan0/pucuk11 (1.0.0) +11 more potentially affected by unknown CVE via pucuk5000 (>=1.4.4, <=2.1.5)

pucuk5000 NPM version =1.4.4, =1.1.2, =1.1.0, =3.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181513...

@akunsansan0/batu (1.1.7), @akunsansan0/batu1 (1.1.7) +32 more potentially affected by unknown CVE via amis_pisan99 (>=0.1.0, <=1.1.9)

amispisan99 NPM version =0.1.0, =1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on amispisan99 and may be impacted: - @akunsansan0/batu 1.1.7 - @akunsansan0/batu1 1.1.7 - @akunsansan0/batu10 1.1.7 - @akunsansan0/batu11 1.1.7 - @akunsansan0/batu12...

@akunsansan0/geulis94 (1.1.4), bata1 (1.0.0) +41 more potentially affected by unknown CVE via geulis94 (>=2.2.2, <=3.1.1)

geulis94 NPM version =2.2.2, =3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on geulis94 and may be impacted: - @akunsansan0/geulis94 1.1.4 - bata1 1.0.0 - bata10 1.0.0 - bata11 1.0.0 - bata2 1.0.0 - bata3 1.0.0 - bata4 1.0.0 - bata5 1.0.0 - bata6...

@akunsansan0/pucuk5000 (1.1.6) potentially affected by unknown CVE via @akunsansan0/pucuk5000 (1.1.7)

@akunsansan0/pucuk5000 NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @akunsansan0/pucuk5000 and may be impacted: - @akunsansan0/pucuk5000 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181329...

1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +19562 more potentially affected by unknown CVE via nitroteh (1.1.4)

nitroteh NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on nitroteh and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/miftah19repo 1.0.0 - @mipta19/nitroteh 1.1.4 - @miptaa02/jiss 1.1.4 - aabi-alfi-av 1.0.0...

trevora-cissa-cir7 (1.0.0) potentially affected by unknown CVE via @mipta1/tehtehteh (1.1.4)

@mipta1/tehtehteh NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @mipta1/tehtehteh and may be impacted: - trevora-cissa-cir7 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-179418...