h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) +2 more potentially affected by unknown CVE via h1-cli-core (1.0.1-alpha.1)

h1-cli-core NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-core and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Sourc...

04-as-contact-numbers-menu-cli (1.0.0), 10xanswers (>=1.0.11, <=1.0.36) +426 more potentially affected by unknown CVE via save-dev (0.0.1-security)

save-dev NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on save-dev and may be impacted: - 04-as-contact-numbers-menu-cli 1.0.0 - 10xanswers =1.0.11, =3.0.2, =1.6.5, =1.9.1, =1.2.0, =1.1.6, =0.2.1, =1.0.0 - @andes/plex 8.0.14 -...

000tea (1.4.5), 00tea (1.4.4) +838 more potentially affected by unknown CVE via name (0.0.2)

name NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on name and may be impacted: - 000tea 1.4.5 - 00tea 1.4.4 - 01q 1.5.1 - 032we 1.5.7 - 0tea 1.4.3 - 123qaz 1.1.1 - 12we 1.6.9 - 12wea 1.5.5 - 1qwe 1.4.6 - 1qwer 1.4.7 - 1qwert 1.4.8 -...

04-rsib_contact-numbers-menue_cli (>=1.0.0, <=1.0.1), advanture-game-by-sam (>=1.0.0, <=1.0.1) +2 more potentially affected by unknown CVE via chak (0.0.1-security)

chak NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chak and may be impacted: - 04-rsibcontact-numbers-menuecli =1.0.0, =1.0.0, =1.0.1, =1.0.3 - text-base-adventure-92 1.0.0 Source cves: unknown CVE Source advisory:...

jones-mysql (1.0.0), jones-ndb (1.0.0) potentially affected by unknown CVE via database-jones (1.2.8)

database-jones NPM version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on database-jones and may be impacted: - jones-mysql 1.0.0 - jones-ndb 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17995...

ftms (1.0.0), package-ftms (1.0.0) potentially affected by unknown CVE via requset (0.0.1-security)

requset NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requset and may be impacted: - ftms 1.0.0 - package-ftms 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32120...

@itutoring/itutoring_application_js_api (>=1.3.3, <=1.20.7), html-to-unicode (>=1.0.0, <=1.0.2) +2 more potentially affected by unknown CVE via reacct (0.0.1-security)

reacct NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reacct and may be impacted: - @itutoring/itutoringapplicationjsapi =1.3.3, =1.0.0, =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31760...

bud-babelify (>=0.0.1, <=1.0.0) potentially affected by unknown CVE via bud-browserify (>=0.4.4, <=2.0.0)

bud-browserify NPM version =0.4.4, =0.0.1, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16253...

@etherio/database (>=0.0.1, <=0.0.13), @gridnt/ngplus (1.0.3) +23 more potentially affected by unknown CVE via axois (0.0.1-security)

axois NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axois and may be impacted: - @etherio/database =0.0.1, =0.5.6, =3.10.2-alpha.0, =0.0.27, =0.0.27, =1.0.0, =1.0.2, =0.1.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE...

react-endless (>=1.0.4, <=1.0.6), react-templet (>=1.0.0, <=1.0.3) potentially affected by unknown CVE via epress (0.0.1-security)

epress NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epress and may be impacted: - react-endless =1.0.4, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19723...

brick-node (>=0.0.0, <=0.0.17), change-object (0.0.0) +8 more potentially affected by unknown CVE via stream-format (0.0.3)

stream-format NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on stream-format and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34079...

@simplyjoe/private-package (1.0.1), antra567 (1.0.0) +1 more potentially affected by unknown CVE via lodashh (0.0.1-security)

lodashh NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodashh and may be impacted: - @simplyjoe/private-package 1.0.1 - antra567 1.0.0 - cfn-resolver-lib =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory:...

dm-ide (>=0.0.1, <=1.2.8) potentially affected by unknown CVE via electrin (0.0.1-security)

electrin NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on electrin and may be impacted: - dm-ide =0.0.1, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19424...

vce-terminal (>=1.2.4, <=1.2.8) potentially affected by unknown CVE via eletron (0.0.1-security)

eletron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eletron and may be impacted: - vce-terminal =1.2.4, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19514...

ourtunes (>=0.0.0, <=1.1.0) potentially affected by unknown CVE via play-url (0.0.5)

play-url NPM version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on play-url and may be impacted: - ourtunes =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29381...

@rustybrooks/eslint-config-prettier (>=1.0.0, <=1.0.18) potentially affected by unknown CVE via eslint-plugin-airbnb-base (0.0.1-security)

eslint-plugin-airbnb-base NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eslint-plugin-airbnb-base and may be impacted: - @rustybrooks/eslint-config-prettier =1.0.0, =1.0.18 Source cves: unknown CVE Source advisory:...

simple-basic-react-button (0.1.0) potentially affected by unknown CVE via prpo-types (0.0.1-security)

prpo-types NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prpo-types and may be impacted: - simple-basic-react-button 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30788...

remenu (>=0.0.3, <=0.0.5) potentially affected by unknown CVE via xcb (1.2.2)

xcb CARGO version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on xcb and may be impacted: - remenu =0.0.3, =0.0.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0051...

dji-log-parser (>=0.5.0, <=0.5.7) potentially affected by unknown CVE via tsify-next (0.5.6)

tsify-next CARGO version 0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on tsify-next and may be impacted: - dji-log-parser =0.5.0, =0.5.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0048...

@-xun/symbiote (>=3.7.0, <=4.11.4), @0x57/pierre (>=0.0.3, <=0.0.16) +893 more potentially affected by unknown CVE via @eslint/plugin-kit (>=0.1.0, <=0.2.8)

@eslint/plugin-kit NPM version =0.1.0, =3.7.0, =0.0.3, =1.1.44, =1.1.14, =0.0.1-alpha.3, =0.0.1, =10.0.0, =10.0.0, =8.3.0, =13.0.0, =2.6.0, =2.2.9, =0.0.2, =35.0.1, =38.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XFFM-G5W8-QVG7...