big-integer-max (1.0.0), big-integer-min (>=1.0.0, <=1.0.1) +25 more potentially affected by unknown CVE via just-next-tick (0.0.0)

just-next-tick NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-next-tick and may be impacted: - big-integer-max 1.0.0 - big-integer-min =1.0.0, =0.0.3, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.9 and more Source cves: unknown CVE Sour...

react-calendar1 (>=0.1.0, <=1.1.4) potentially affected by unknown CVE via react-google-calendar-events (0.0.1-security)

react-google-calendar-events NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-google-calendar-events and may be impacted: - react-calendar1 =0.1.0, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31791...

confluence-static-site-builder (>=1.0.0-m04, <=1.0.0-m08) potentially affected by unknown CVE via commnader (0.0.1-security)

commnader NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commnader and may be impacted: - confluence-static-site-builder =1.0.0-m04, =1.0.0-m08 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17424...

@luxiaodan/el-selection-tree-table (1.0.3) potentially affected by unknown CVE via lodsah (0.0.1-security)

lodsah NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodsah and may be impacted: - @luxiaodan/el-selection-tree-table 1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25516...

nineone152 (>=1.1.9, <=1.1.11) potentially affected by unknown CVE via node-ftp (0.0.1-security)

node-ftp NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-ftp and may be impacted: - nineone152 =1.1.9, =1.1.11 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27624...

very_good_package (>=1.0.8, <=1.0.12) potentially affected by unknown CVE via testing054dfas (0.0.1-security)

testing054dfas NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on testing054dfas and may be impacted: - verygoodpackage =1.0.8, =1.0.12 Source cves: unknown CVE Source advisory: OSV:MAL-2025-36728...

node-27285e17 (1.0.0) potentially affected by unknown CVE via undesrcore (0.0.1-security)

undesrcore NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on undesrcore and may be impacted: - node-27285e17 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37738...

20210816-test (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via lodah (0.0.1-security)

lodah NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodah and may be impacted: - 20210816-test =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25501...

go-api-starter (>=0.0.0, <=1.3.0), redux-starter (>=0.0.0, <=1.1.0) potentially affected by unknown CVE via kik-starter (>=0.0.1, <=2.2.1)

kik-starter NPM version =0.0.1, =0.0.0, =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24454...

http-run (0.0.1) potentially affected by unknown CVE via requet (0.0.1-security)

requet NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requet and may be impacted: - http-run 0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32114...

risczero-01 (1.0.0), tea02-ddomutrr (1.0.1) +14 more potentially affected by unknown CVE via api-chatfb (0.0.1-security)

api-chatfb NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on api-chatfb and may be impacted: - risczero-01 1.0.0 - tea02-ddomutrr 1.0.1 - tea03-zhangmaxq 1.0.1 - tea05-armyben66 1.0.2 - tea06-meogak88 1.0.1 - tea07-xokohero...

gezi-core (>=0.0.0, <=0.0.2), less-common-words (0.0.0) +1 more potentially affected by unknown CVE via most-common-words (2.0.0)

most-common-words NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on most-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - less-common-words 0.0.0 - meta-tags 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-267...

brick (0.0.0), brick-node (>=0.0.0, <=0.0.17) +18 more potentially affected by unknown CVE via uniques (>=0.0.0, <=0.0.1)

uniques NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.9, =0.0.0, =1.1.0, =2.7.12 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-37826...

@c0b41/prettify-error (1.0.0), assume (>=0.0.10, <=1.4.0) +24 more potentially affected by unknown CVE via failing-line (>=0.0.0, <=0.1.0)

failing-line NPM version =0.0.0, =0.0.10, =7.1.0, =0.0.0, =1.0.0, =0.1.1, =0.0.0, =1.0.0, =0.0.1, =0.0.4 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-20163...

@mpticketsmodule/common (>=1.0.4, <=1.0.13), @o.yilmaz/shared (>=1.0.0, <=1.0.28) +1 more potentially affected by unknown CVE via epxress (0.0.1-security)

epxress NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epxress and may be impacted: - @mpticketsmodule/common =1.0.4, =1.0.0, =1.0.28 - @wikietickets/common 0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19728...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) potentially affected by unknown CVE via filename-id (0.0.0)

filename-id NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on filename-id and may be impacted: - brick-browser =0.0.0, =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20552...

cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via config-doc (0.1.0)

config-doc NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on config-doc and may be impacted: - cli-form =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17474...

change-object (0.0.0), cli-qa (2.0.0) +7 more potentially affected by unknown CVE via run-serially (0.0.0)

run-serially NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on run-serially and may be impacted: - change-object 0.0.0 - cli-qa 2.0.0 - comma-list 0.0.0 - fd-select 1.0.0 - frp-tick 1.0.0 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 ...

1yoouoo (>=0.0.5, <=0.1.2), bluebottle-magento-marketplace (>=1.1.2, <=1.2.5) +6 more potentially affected by unknown CVE via module-name (0.0.1-security)

module-name NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on module-name and may be impacted: - 1yoouoo =0.0.5, =1.1.2, =0.0.2, =1.0.1, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26605...

domquery (>=1.0.0, <=1.0.1) potentially affected by unknown CVE via bind-key (0.0.0)

bind-key NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on bind-key and may be impacted: - domquery =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15691...

deletenewf (1.0.0), itheima-tool-time (1.0.0) +1 more potentially affected by unknown CVE via jquey (0.0.1-security)

jquey NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jquey and may be impacted: - deletenewf 1.0.0 - itheima-tool-time 1.0.0 - untitledfedorsh 1.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23906...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-openapi-generator (1.0.1-alpha.1)

h1-cli-ext-root-openapi-generator NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-openapi-generator and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unkno...

radio-paradise-api (0.0.1), turkish-synonyms-api (0.0.0) potentially affected by unknown CVE via memoize-with-leveldb (>=0.0.1, <=2.0.0)

memoize-with-leveldb NPM version =0.0.1, =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on memoize-with-leveldb and may be impacted: - radio-paradise-api 0.0.1 - turkish-synonyms-api 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-261...

@tgticketing/common (>=1.0.2, <=1.0.25), pirvp (1.0.0) potentially affected by unknown CVE via exrpess (0.0.1-security)

exrpess NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on exrpess and may be impacted: - @tgticketing/common =1.0.2, =1.0.25 - pirvp 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20101...

my-testutil (1.0.1), storm-test (0.0.1) +1 more potentially affected by unknown CVE via wepack-cli (0.0.1-security)

wepack-cli NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wepack-cli and may be impacted: - my-testutil 1.0.1 - storm-test 0.0.1 - stormydb =0.1.1, =0.5.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39082...

on-duty-js (3.0.0), todo-app-23426 (1.0.0) potentially affected by unknown CVE via chalkk (0.0.1-security)

chalkk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chalkk and may be impacted: - on-duty-js 3.0.0 - todo-app-23426 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16776...

brick-node (>=0.0.8, <=0.0.17), bud (0.0.3) +18 more potentially affected by unknown CVE via new-command (>=0.0.0, <=2.0.0)

new-command NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.3, =0.0.4, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27359...

@naologic/design (>=1.0.5, <=1.1.4) potentially affected by unknown CVE via iodash (0.0.1-security)

iodash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on iodash and may be impacted: - @naologic/design =1.0.5, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23307...

assume (>=0.0.10, <=1.4.0), atomify (>=7.1.0, <=7.3.1) +18 more potentially affected by unknown CVE via prettify-error (0.1.1)

prettify-error NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on prettify-error and may be impacted: - assume =0.0.10, =7.1.0, =1.0.0, =1.0.0, =0.0.1, =0.0.10, =1.16.0, =3.0.0 and more Source cves: unknown CVE Source advisory:...

brick-node (>=0.0.0, <=0.0.17) potentially affected by unknown CVE via categorize-files (0.0.1)

categorize-files NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on categorize-files and may be impacted: - brick-node =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16663...

brick (0.0.0), brick-node (>=0.0.0, <=0.0.17) +34 more potentially affected by unknown CVE via local-debug (>=0.0.0, <=2.0.0)

local-debug NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.7, =0.0.0, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25478...

level-json (>=0.0.4, <=1.0.0), scrape-eksi (>=0.0.0, <=0.0.1) +2 more potentially affected by unknown CVE via level-client (>=0.0.1, <=1.0.0)

level-client NPM version =0.0.1, =0.0.4, =0.0.0, =0.2.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25197...

clicommandcources (1.0.1) potentially affected by unknown CVE via commandr (0.0.1-security)

commandr NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commandr and may be impacted: - clicommandcources 1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17409...

packagesss (1.0.0) potentially affected by unknown CVE via ldash (0.0.1-security)

ldash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldash and may be impacted: - packagesss 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25004...

fd-dcc (>=1.0.0, <=2.1.4), test_sdk_aki (>=1.0.3, <=1.0.4) +1 more potentially affected by unknown CVE via axioss (0.0.1-security)

axioss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axioss and may be impacted: - fd-dcc =1.0.0, =1.0.3, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15242...

fox (>=1.5.0, <=1.6.2), pomodoro-timer (>=0.0.4, <=0.0.5) +3 more potentially affected by unknown CVE via after-time (>=0.0.0, <=0.0.1)

after-time NPM version =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1 - tomato-timer 0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14147...

23march (1.0.0), @castyiglitchxz/alert-box-package (>=1.0.0, <=1.2.5) +30 more potentially affected by unknown CVE via node.js (0.0.1-security)

node.js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node.js and may be impacted: - 23march 1.0.0 - @castyiglitchxz/alert-box-package =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.1, =1.0.5, =1.0.0, =1.2.5, =1.2.1, =0.0.1, =2.2.0,...

evy-fanyi (>=0.0.1, <=0.0.2), starry_icon_tool (1.0.0) potentially affected by unknown CVE via langdet (0.0.1-security)

langdet NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on langdet and may be impacted: - evy-fanyi =0.0.1, =0.0.2 - starryicontool 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24945...

bud (>=0.0.0, <=0.1.2), declarative-js (>=0.0.0, <=0.0.2) +3 more potentially affected by unknown CVE via new-partial (0.0.1)

new-partial NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on new-partial and may be impacted: - bud =0.0.0, =0.0.0, =0.0.1, =0.0.0, =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27364...

scraping-eksi (>=0.0.0, <=1.0.1) potentially affected by unknown CVE via limited-parallel-loop (0.0.0)

limited-parallel-loop NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on limited-parallel-loop and may be impacted: - scraping-eksi =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25373...

@mattdesl/quick-stub (>=1.0.0, <=3.0.1), brick (0.0.0) +15 more potentially affected by unknown CVE via variable-name (>=0.0.1, <=0.0.2)

variable-name NPM version =0.0.1, =1.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =1.0.0, =0.0.0, =1.2.0, =7.0.0, =1.0.0, =0.0.0, =1.1.1, =1.0.0, =1.9.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-38145...

kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-form (0.1.4)

cli-form NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...

gezi-core (>=0.0.0, <=0.0.2), meta-tags (0.0.0) potentially affected by unknown CVE via less-common-words (0.0.0)

less-common-words NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on less-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - meta-tags 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25174...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +29 more potentially affected by unknown CVE via show-version (>=0.0.0, <=2.0.0)

show-version NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33163...

common-media (1.0.0), common-soundcloud (>=1.0.0, <=1.1.0) +14 more potentially affected by unknown CVE via require-sdk (>=0.0.0, <=0.0.2)

require-sdk NPM version =0.0.0, =1.0.0, =1.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.4, =0.0.2, =0.0.3, =0.0.1, =0.0.1, =0.0.0, =0.1.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-32119...

com.prototyper.openai-editor-tool (0.1.3) potentially affected by unknown CVE via com.unity.nuget.newtonsoft-json (0.0.1-security)

com.unity.nuget.newtonsoft-json NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on com.unity.nuget.newtonsoft-json and may be impacted: - com.prototyper.openai-editor-tool 0.1.3 Source cves: unknown CVE Source advisory:...

gulp-jsify (0.1.0) potentially affected by unknown CVE via jsify (0.0.4)

jsify NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on jsify and may be impacted: - gulp-jsify 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23947...

6_0901 (1.0.0), @alu0101227610/gh-repo-rename (>=1.2.0, <=1.2.1) +27 more potentially affected by unknown CVE via comander (0.0.1-security)

comander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on comander and may be impacted: - 60901 1.0.0 - @alu0101227610/gh-repo-rename =1.2.0, =1.1.1, =1.2.0, =0.0.2, =1.0.0, =1.2.2, =1.0.1, =1.0.5 - hager1 1.0.0 and more Sourc...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-iam-project-select (1.0.1-alpha.1)

h1-cli-ext-iam-project-select NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-iam-project-select and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE...

@pirxpilot/confirmation (1.0.1), @pirxpilot/dialog (1.1.1) +46 more potentially affected by unknown CVE via macgyver (>=1.9.2, <=1.10.1)

macgyver NPM version =1.9.2, =1.1.0, =1.0.3, =2.0.0, =1.0.1, =1.0.0, =1.0.8 - democracyos-confirmation 0.0.5 - democracyos-popover 1.1.0 - democracyos-quill 0.19.12 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25744...