luis-reddit-cli (1.0.0), md-links-larissadepaula (>=0.2.0, <=0.2.1) +1 more potentially affected by unknown CVE via node-fecth (0.0.1-security)

node-fecth NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-fecth and may be impacted: - luis-reddit-cli 1.0.0 - md-links-larissadepaula =0.2.0, =0.0.37, =0.0.40 Source cves: unknown CVE Source advisory: OSV:MAL-2025-2761...

custom_ww (1.0.0) potentially affected by unknown CVE via lodasn (0.0.1-security)

lodasn NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodasn and may be impacted: - customww 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25510...

brick-node (>=0.0.0, <=0.0.17), change-object (0.0.0) +9 more potentially affected by unknown CVE via flat-glob (0.0.1)

flat-glob NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flat-glob and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20688...

04-as-contact-numbers-menu-cli (1.0.0), 10xanswers (>=1.0.11, <=1.0.36) +426 more potentially affected by unknown CVE via save-dev (0.0.1-security)

save-dev NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on save-dev and may be impacted: - 04-as-contact-numbers-menu-cli 1.0.0 - 10xanswers =1.0.11, =3.0.2, =1.6.5, =1.9.1, =1.2.0, =1.1.6, =0.2.1, =1.0.0 - @andes/plex 8.0.14 -...

brick (0.0.0), bud (>=0.0.0, <=0.1.2) +16 more potentially affected by unknown CVE via first-val (0.0.0)

first-val NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on first-val and may be impacted: - brick 0.0.0 - bud =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =0.0.0, =3.1.1, =0.0.0, =0.0.4, =0.0.0, =0.0.2 and more Source cves:...

@pagopa/io-react-native-wallet (>=1.2.2, <=1.5.0), @repay/eslint-config (0.1.1) +9 more potentially affected by unknown CVE via yarn.lock (0.0.1-security)

yarn.lock NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on yarn.lock and may be impacted: - @pagopa/io-react-native-wallet =1.2.2, =1.0.0, =2.14.0-beta.33f459cf.046a621, =4.2.0, =2.7.0, =2.0.29, =1.0.5, =0.1.0, =1.2.0, =1.2.5...

kik (>=0.0.0, <=1.3.0), kik-starter (2.2.0) potentially affected by unknown CVE via install-module (>=0.2.0, <=1.1.0)

install-module NPM version =0.2.0, =0.0.0, =1.3.0 - kik-starter 2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23249...

ourtunes (>=0.0.0, <=1.1.0), play-url (>=0.0.2, <=0.0.5) potentially affected by unknown CVE via rdio-js-api (0.0.6)

rdio-js-api NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on rdio-js-api and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31754...

04-rsib_contact-numbers-menue_cli (>=1.0.0, <=1.0.1), advanture-game-by-sam (>=1.0.0, <=1.0.1) +2 more potentially affected by unknown CVE via chak (0.0.1-security)

chak NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chak and may be impacted: - 04-rsibcontact-numbers-menuecli =1.0.0, =1.0.0, =1.0.1, =1.0.3 - text-base-adventure-92 1.0.0 Source cves: unknown CVE Source advisory:...

@uni-cli/cli (>=1.0.6, <=1.0.12), @uni-cli/init (1.0.12) +1 more potentially affected by unknown CVE via fs-extar (0.0.1-security)

fs-extar NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fs-extar and may be impacted: - @uni-cli/cli =1.0.6, =1.0.12 - @uni-cli/init 1.0.12 - hwsz-tools 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-21006...

000tea (1.4.5), 00tea (1.4.4) +838 more potentially affected by unknown CVE via name (0.0.2)

name NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on name and may be impacted: - 000tea 1.4.5 - 00tea 1.4.4 - 01q 1.5.1 - 032we 1.5.7 - 0tea 1.4.3 - 123qaz 1.1.1 - 12we 1.6.9 - 12wea 1.5.5 - 1qwe 1.4.6 - 1qwer 1.4.7 - 1qwert 1.4.8 -...

formii (1.0.0), html-patcher-stream (>=1.0.0, <=1.1.0) +1 more potentially affected by unknown CVE via html-patcher (>=0.0.3, <=0.1.0)

html-patcher NPM version =0.0.3, =1.0.0, =0.1.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22751...

ftms (1.0.0), package-ftms (1.0.0) potentially affected by unknown CVE via requset (0.0.1-security)

requset NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requset and may be impacted: - ftms 1.0.0 - package-ftms 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32120...

@alancastro06/coolsolelog (22.14.0), albot (>=0.1.0, <=0.14.1) +43 more potentially affected by unknown CVE via ansi-codes (>=0.0.0, <=2.0.0)

ansi-codes NPM version =0.0.0, =0.1.0, =0.0.10, =7.1.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =0.0.1, =0.0.0, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-14554...

@rustybrooks/eslint-config-prettier (>=1.0.0, <=1.0.18) potentially affected by unknown CVE via eslint-plugin-airbnb-base (0.0.1-security)

eslint-plugin-airbnb-base NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eslint-plugin-airbnb-base and may be impacted: - @rustybrooks/eslint-config-prettier =1.0.0, =1.0.18 Source cves: unknown CVE Source advisory:...

my-first-vue-project (0.1.0), react-responsive-data-table (>=1.0.0, <=1.0.5) potentially affected by unknown CVE via bootstrap4 (0.0.1-security)

bootstrap4 NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap4 and may be impacted: - my-first-vue-project 0.1.0 - react-responsive-data-table =1.0.0, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15992...

brick (0.0.0), brick-browser (>=0.0.0, <=0.0.14) +11 more potentially affected by unknown CVE via methodify (>=0.0.2, <=0.0.3)

methodify NPM version =0.0.2, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26261...

bud-indexhtml (>=0.0.0, <=0.0.3), indexhtml-cli (0.0.0) +1 more potentially affected by unknown CVE via indexhtml (>=0.0.0, <=0.0.3)

indexhtml NPM version =0.0.0, =0.0.0, =0.0.2, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23115...

@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)

babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15281...

adaptive-fs (>=1.1.0, <=1.3.2), ajato (0.0.1-wip) +1 more potentially affected by unknown CVE via mogoose (0.0.1-security)

mogoose NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mogoose and may be impacted: - adaptive-fs =1.1.0, =1.0.48, =1.1.26 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26613...