packagesss (1.0.0) potentially affected by unknown CVE via ldash (0.0.1-security)

ldash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldash and may be impacted: - packagesss 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25004...

domquery (>=1.0.0, <=1.0.1) potentially affected by unknown CVE via bind-key (0.0.0)

bind-key NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on bind-key and may be impacted: - domquery =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15691...

assume (>=0.0.10, <=1.4.0), atomify (>=7.1.0, <=7.3.1) +32 more potentially affected by unknown CVE via style-format (>=0.0.0, <=2.0.0)

style-format NPM version =0.0.0, =0.0.10, =7.1.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =0.0.0, =0.0.2 - fd-select 1.0.0 - frp-tick 1.0.0 - generator-freekerneljs 0.6.0 - hearing-aid 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-34115...

h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-auth (1.0.1-alpha.1)

h1-cli-ext-root-auth NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-auth and may be impacted: - h1-cli-device-node =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22080...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via read-cli-input (1.0.1)

read-cli-input NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on read-cli-input and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31878...

delegate-dom (>=0.0.0, <=0.0.1), dom-delegation-stream (0.0.0) +2 more potentially affected by unknown CVE via matches-dom-selector (0.0.0)

matches-dom-selector NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on matches-dom-selector and may be impacted: - delegate-dom =0.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25996...

03_node_1 (1.0.0), 111nodejs03 (1.0.0) +97 more potentially affected by unknown CVE via math (0.0.3)

math NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on math and may be impacted: - 03node1 1.0.0 - 111nodejs03 1.0.0 - @daostack/arc =0.0.1-rc.21, =0.0.1-rc.41-v2, =1.0.1, =1.0.0, =2.0.11, =0.8.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

platzi-virtual-machine (1.0.0) potentially affected by unknown CVE via pvm (0.0.1-security)

pvm NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on pvm and may be impacted: - platzi-virtual-machine 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30899...

nice-elements (>=1.1.2, <=1.13.5), olaii-web-common (>=1.0.0, <=1.0.33) potentially affected by unknown CVE via angular-truncate (0.0.1-security)

angular-truncate NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on angular-truncate and may be impacted: - nice-elements =1.1.2, =1.0.0, =1.0.33 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14532...

userbook (>=0.2.0, <=0.2.6) potentially affected by unknown CVE via propertify (0.0.0)

propertify NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on propertify and may be impacted: - userbook =0.2.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30750...

@dudadev/zip-modifier-utils (1.1.0), @newsssticketing/common (>=1.0.4, <=1.0.16) +4 more potentially affected by unknown CVE via experss (0.0.1-security)

experss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on experss and may be impacted: - @dudadev/zip-modifier-utils 1.1.0 - @newsssticketing/common =1.0.4, =2.0.1, =1.0.2, =1.0.6 Source cves: unknown CVE Source advisory:...

bassant-courses-manager (>=1.0.1, <=1.0.5), dxtest1 (>=1.0.0, <=1.0.2) +3 more potentially affected by unknown CVE via commender (0.0.1-security)

commender NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commender and may be impacted: - bassant-courses-manager =1.0.1, =1.0.0, =1.0.0, =1.0.1 - xy-xueyong-rkc 1.0.0 - zansanfeng123 1.0.0 Source cves: unknown CVE Source...

baluni (>=1.0.0, <=2.7.2), fast-publish (>=0.0.1-alpha.0, <=0.0.2) potentially affected by unknown CVE via chakl (0.0.1-security)

chakl NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chakl and may be impacted: - baluni =1.0.0, =0.0.1-alpha.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16766...

@cnbritain/merlin-www-build-tools (0.1.2), auto_cep (>=1.0.0, <=1.0.2) +5 more potentially affected by unknown CVE via browsersync (0.0.1-security)

browsersync NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on browsersync and may be impacted: - @cnbritain/merlin-www-build-tools 0.1.2 - autocep =1.0.0, =1.0.114, =1.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source...

snsadmin (1.0.0) potentially affected by unknown CVE via soket.io (0.0.1-security)

soket.io NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on soket.io and may be impacted: - snsadmin 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33611...

@goodboydigital/fido-build (>=3.0.0, <=13.2.0), @olympeio-extensions/sustain (>=2.11.5, <=2.15.0) +15 more potentially affected by unknown CVE via bable-loader (0.0.1-security)

bable-loader NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bable-loader and may be impacted: - @goodboydigital/fido-build =3.0.0, =2.11.5, =0.0.6-dev, =0.0.2, =0.0.2, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 a...

tea07-xokohero (1.0.1) potentially affected by unknown CVE via api-chatfb-test (0.0.1-security)

api-chatfb-test NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on api-chatfb-test and may be impacted: - tea07-xokohero 1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14640...

@xizhouh/former (>=0.0.1, <=1.1.1), @xizhouh/formless (>=0.0.1, <=0.0.6) +1 more potentially affected by unknown CVE via set-object-path (2.0.1)

set-object-path NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on set-object-path and may be impacted: - @xizhouh/former =0.0.1, =0.0.1, =0.3.0, =0.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33017...

-price-checker (>=1.0.0, <=1.0.5), 003-gas-convert (1.0.1) +17825 more potentially affected by unknown CVE via fs (>=0.0.0, <=0.0.2)

fs NPM version =0.0.0, =1.0.0, =1.0.0, =0.0.21, =1.0.0, =0.3.96, =1.0.2 - 2.4-qr-code-project 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-21003...

@simplyjoe/private-package (1.0.1), antra567 (1.0.0) +1 more potentially affected by unknown CVE via lodashh (0.0.1-security)

lodashh NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodashh and may be impacted: - @simplyjoe/private-package 1.0.1 - antra567 1.0.0 - cfn-resolver-lib =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory:...