cassandra-query (>=1.0.1, <=1.0.3), toobatel-bot-lib-js (1.0.0) potentially affected by unknown CVE via blubird (0.0.1-security)

blubird NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on blubird and may be impacted: - cassandra-query =1.0.1, =1.0.3 - toobatel-bot-lib-js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15874...

simple-basic-react-button (0.1.0) potentially affected by unknown CVE via prpo-types (0.0.1-security)

prpo-types NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prpo-types and may be impacted: - simple-basic-react-button 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30788...

change-object (0.0.0) potentially affected by unknown CVE via change-object-path (0.0.1)

change-object-path NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on change-object-path and may be impacted: - change-object 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16781...

react-endless (>=1.0.4, <=1.0.6), react-templet (>=1.0.0, <=1.0.3) potentially affected by unknown CVE via epress (0.0.1-security)

epress NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epress and may be impacted: - react-endless =1.0.4, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19723...

artery-routes-docs (>=0.0.2, <=0.0.25), arteryjs (0.0.0) +5 more potentially affected by unknown CVE via to-slug (0.0.0)

to-slug NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-slug and may be impacted: - artery-routes-docs =0.0.2, =0.2.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37002...

brick-node (>=0.0.0, <=0.0.17), change-object (0.0.0) +8 more potentially affected by unknown CVE via stream-format (0.0.3)

stream-format NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on stream-format and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34079...

failing-line (0.0.1), mp3s (0.0.0) +3 more potentially affected by unknown CVE via findall (0.0.4)

findall NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on findall and may be impacted: - failing-line 0.0.1 - mp3s 0.0.0 - ourtunes =0.0.0, =0.0.2, =0.0.3, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20572...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +20 more potentially affected by unknown CVE via default-debug (>=0.0.0, <=2.0.0)

default-debug NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-18178...

ourtunes (>=0.0.0, <=1.1.0) potentially affected by unknown CVE via play-url (0.0.5)

play-url NPM version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on play-url and may be impacted: - ourtunes =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29381...

sr-npm (1.7.308) potentially affected by unknown CVE via wix-secrets-backend (0.0.1-security)

wix-secrets-backend NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wix-secrets-backend and may be impacted: - sr-npm 1.7.308 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39369...

ourtunes (>=0.0.0, <=1.1.0), play-url (>=0.0.2, <=0.0.5) potentially affected by unknown CVE via soundcloud-stream (0.0.2)

soundcloud-stream NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on soundcloud-stream and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33673...

taky-cache-loop (0.0.1), taky-redis-throttle (0.0.1) potentially affected by unknown CVE via every-time (0.0.0)

every-time NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on every-time and may be impacted: - taky-cache-loop 0.0.1 - taky-redis-throttle 0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19990...

rhys19-verbatim (2.0.2) potentially affected by unknown CVE via elctron (0.0.1-security)

elctron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on elctron and may be impacted: - rhys19-verbatim 2.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19315...

ahmedraza-atm (>=2.0.0, <=2.0.3), cli-03-todo-list (1.0.0) +3 more potentially affected by unknown CVE via chlak (0.0.1-security)

chlak NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chlak and may be impacted: - ahmedraza-atm =2.0.0, =1.0.0, =1.0.0, =1.0.1 - todo-list-with-anila-waqar 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16991...

@etherio/database (>=0.0.1, <=0.0.13), @gridnt/ngplus (1.0.3) +23 more potentially affected by unknown CVE via axois (0.0.1-security)

axois NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axois and may be impacted: - @etherio/database =0.0.1, =0.5.6, =3.10.2-alpha.0, =0.0.27, =0.0.27, =1.0.0, =1.0.2, =0.1.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE...

@simplyjoe/private-package (1.0.1), antra567 (1.0.0) +1 more potentially affected by unknown CVE via lodashh (0.0.1-security)

lodashh NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodashh and may be impacted: - @simplyjoe/private-package 1.0.1 - antra567 1.0.0 - cfn-resolver-lib =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory:...

dm-ide (>=0.0.1, <=1.2.8) potentially affected by unknown CVE via electrin (0.0.1-security)

electrin NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on electrin and may be impacted: - dm-ide =0.0.1, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19424...

brick-node (>=0.0.13, <=0.0.17), bud-live-server (>=0.0.0, <=0.0.5) +9 more potentially affected by unknown CVE via set-content-type (>=0.0.0, <=0.0.3)

set-content-type NPM version =0.0.0, =0.0.13, =0.0.0, =0.0.0, =0.0.0, =2.0.4, =3.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33016...

vce-terminal (>=1.2.4, <=1.2.8) potentially affected by unknown CVE via eletron (0.0.1-security)

eletron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eletron and may be impacted: - vce-terminal =1.2.4, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19514...

alert (>=0.0.0, <=0.0.1), background-image (0.0.0) +40 more potentially affected by unknown CVE via new-format (>=0.0.1, <=2.0.0)

new-format NPM version =0.0.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.3.0, =0.0.0, =0.0.10, =0.0.0, =0.0.0, =0.0.0, =0.0.13 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27361...