@6missedcalls-ai/zora-mcp-server (>=0.1.2, <=0.1.3), @aurracloud/agentkit (>=0.9.0, <=0.10.0) +38 more potentially affected by unknown CVE via x402 (>=0.1.2, <=0.4.3)

x402 NPM version =0.1.2, =0.1.2, =0.9.0, =0.1.0-alpha.1, =0.0.1, =0.0.1, =0.0.1, =0.0.0-nightly-20250711210411, =0.3.0, =0.0.3, =0.1.2, =0.1.3 - @openflow-sh/sdk 1.0.0 - @thorium-dev-group/x402-mcp-extension 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3J63-5H8P-GF7C...

x402-native-token-payment-demo (>=0.0.0-alpha, <=0.0.1) potentially affected by unknown CVE via x402-hono (0.3.4)

x402-hono NPM version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on x402-hono and may be impacted: - x402-native-token-payment-demo =0.0.0-alpha, =0.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-X402HONO-12239901...

srb2kartjs (>=2.2.7, <=2.2.9) potentially affected by unknown CVE via ldoash (0.0.1-security)

ldoash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldoash and may be impacted: - srb2kartjs =2.2.7, =2.2.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25007...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-openapi-generator (1.0.1-alpha.1)

h1-cli-ext-root-openapi-generator NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-openapi-generator and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unkno...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-iam-project-select (1.0.1-alpha.1)

h1-cli-ext-iam-project-select NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-iam-project-select and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE...

change-object (0.0.0), cli-qa (2.0.0) +7 more potentially affected by unknown CVE via run-serially (0.0.0)

run-serially NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on run-serially and may be impacted: - change-object 0.0.0 - cli-qa 2.0.0 - comma-list 0.0.0 - fd-select 1.0.0 - frp-tick 1.0.0 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 ...

eksi-server (>=0.0.7, <=0.0.8) potentially affected by unknown CVE via json-resources (0.0.1)

json-resources NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on json-resources and may be impacted: - eksi-server =0.0.7, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23956...

bakpiabathok-3 (1.1.6), bonteng-1 (1.1.6) +1 more potentially affected by unknown CVE via bonteng (0.0.1-security)

bonteng NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bonteng and may be impacted: - bakpiabathok-3 1.1.6 - bonteng-1 1.1.6 - kolekcau-2 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15953...

assume (>=0.0.10, <=1.4.0), atomify (>=7.1.0, <=7.3.1) +18 more potentially affected by unknown CVE via prettify-error (0.1.1)

prettify-error NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on prettify-error and may be impacted: - assume =0.0.10, =7.1.0, =1.0.0, =1.0.0, =0.0.1, =0.0.10, =1.16.0, =3.0.0 and more Source cves: unknown CVE Source advisory:...

com.prototyper.openai-editor-tool (0.1.3) potentially affected by unknown CVE via com.unity.nuget.newtonsoft-json (0.0.1-security)

com.unity.nuget.newtonsoft-json NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on com.unity.nuget.newtonsoft-json and may be impacted: - com.prototyper.openai-editor-tool 0.1.3 Source cves: unknown CVE Source advisory:...

nineone152 (>=1.1.9, <=1.1.11) potentially affected by unknown CVE via node-ftp (0.0.1-security)

node-ftp NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-ftp and may be impacted: - nineone152 =1.1.9, =1.1.11 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27624...

dep_grap_gen (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via shalk (0.0.1-security)

shalk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on shalk and may be impacted: - depgrapgen =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33056...

devel_core (>=0.0.1, <=0.0.8) potentially affected by unknown CVE via requets (0.0.1-security)

requets NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requets and may be impacted: - develcore =0.0.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32115...

sutter-rdd-authentication (>=0.1.0, <=0.2.1) potentially affected by unknown CVE via sutter-rdd-services (0.0.1-security)

sutter-rdd-services NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on sutter-rdd-services and may be impacted: - sutter-rdd-authentication =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34247...

risczero-01 (1.0.0), tea02-ddomutrr (1.0.1) +14 more potentially affected by unknown CVE via api-chatfb (0.0.1-security)

api-chatfb NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on api-chatfb and may be impacted: - risczero-01 1.0.0 - tea02-ddomutrr 1.0.1 - tea03-zhangmaxq 1.0.1 - tea05-armyben66 1.0.2 - tea06-meogak88 1.0.1 - tea07-xokohero...

@akaiv/core (>=1.2.6, <=1.8.3), @akaiv/discord-client (>=1.0.0, <=1.4.1) +3 more potentially affected by unknown CVE via minimst (0.0.1-security)

minimst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on minimst and may be impacted: - @akaiv/core =1.2.6, =1.0.0, =0.1.0, =0.4.0 - @akaiv/kakao-client 2.0.1 - netlify-minutes 0.1.0 Source cves: unknown CVE Source advisory:...

23march (1.0.0), @castyiglitchxz/alert-box-package (>=1.0.0, <=1.2.5) +30 more potentially affected by unknown CVE via node.js (0.0.1-security)

node.js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node.js and may be impacted: - 23march 1.0.0 - @castyiglitchxz/alert-box-package =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.1, =1.0.5, =1.0.0, =1.2.5, =1.2.1, =0.0.1, =2.2.0,...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) +1 more potentially affected by unknown CVE via platform-browser (0.0.1-security)

platform-browser NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 - clinicaamandao 1.0.0 Source cves:...

@baosight/xinrong (>=0.0.36, <=0.0.37), npm_1st_publish (1.0.0) +1 more potentially affected by unknown CVE via jqeury (0.0.1-security)

jqeury NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jqeury and may be impacted: - @baosight/xinrong =0.0.36, =0.0.37 - npm1stpublish 1.0.0 - wypulldom 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23891...

fstlncomponent (>=1.0.1, <=1.0.7) potentially affected by unknown CVE via plugin-sass (0.0.1-security)

plugin-sass NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-sass and may be impacted: - fstlncomponent =1.0.1, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29416...