@aviationpast/niotest (>=1.0.1, <=1.0.16) potentially affected by unknown CVE via @aviationpast/niotest (1.0.17)

@aviationpast/niotest NPM version 1.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on @aviationpast/niotest and may be impacted: - @aviationpast/niotest =1.0.1, =1.0.16 Source cves: unknown CVE Source advisory: OSV:MAL-2025-7098...

sutter-rdd-authentication (>=0.1.0, <=0.2.1) potentially affected by unknown CVE via sutter-rdd-services (0.0.1-security)

sutter-rdd-services NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on sutter-rdd-services and may be impacted: - sutter-rdd-authentication =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34247...

fox (0.0.8), lowkick (>=0.0.1, <=0.1.0) +2 more potentially affected by unknown CVE via combiner (1.2.1)

combiner NPM version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on combiner and may be impacted: - fox 0.0.8 - lowkick =0.0.1, =1.1.0, =0.3.1, =0.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17379...

08cms (1.0.0), 1.1.0 (1.0.0) +8978 more potentially affected by unknown CVE via orchestrator (>=0.0.5, <=0.3.8)

orchestrator NPM version =0.0.5, =1.0.0, =1.0.0, =0.0.2, =1.0.0, =0.0.1, =1.0.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-28475...

devel_core (>=0.0.1, <=0.0.8) potentially affected by unknown CVE via requets (0.0.1-security)

requets NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requets and may be impacted: - develcore =0.0.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32115...

duba (>=0.0.0, <=0.0.2), userbook (>=0.1.0, <=0.2.6) potentially affected by unknown CVE via checkfor (>=0.0.3, <=0.0.4)

checkfor NPM version =0.0.3, =0.0.0, =0.1.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16880...

cli-form (>=0.1.0, <=0.1.4), cli-qa (>=2.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via comma-list (>=0.0.0, <=0.0.1)

comma-list NPM version =0.0.0, =0.1.0, =2.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17400...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) +1 more potentially affected by unknown CVE via platform-browser (0.0.1-security)

platform-browser NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 - clinicaamandao 1.0.0 Source cves:...

gezi-core (>=0.0.0, <=0.0.2), kik-starter (>=2.1.0, <=2.2.0) potentially affected by unknown CVE via parallelly (>=0.0.1, <=0.1.0)

parallelly NPM version =0.0.1, =0.0.0, =2.1.0, =2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28866...

@biuauth/modal (>=6.1.2, <=6.2.1), @biuauth/ui (>=6.2.0, <=6.2.11) +6 more potentially affected by unknown CVE via reat (0.0.1-security)

reat NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reat and may be impacted: - @biuauth/modal =6.1.2, =6.2.0, =6.1.23, =1.0.0, =2.0.8, =1.1.1, =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31896...

bismagul_project08_quiz (>=1.0.0, <=1.0.1), cli-advanture-game (1.0.0) +5 more potentially affected by unknown CVE via calk (0.0.1-security)

calk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on calk and may be impacted: - bismagulproject08quiz =1.0.0, =1.0.0, =1.0.0, =1.0.1 - todoterminallist 1.0.0 - zhs-cli-advanture-game 1.0.0 Source cves: unknown CVE Source...

03_node_1 (1.0.0), 111nodejs03 (1.0.0) +98 more potentially affected by unknown CVE via math (0.0.3)

math NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on math and may be impacted: - 03node1 1.0.0 - 111nodejs03 1.0.0 - @daostack/arc =0.0.1-rc.21, =0.0.1-rc.41-v2, =1.0.1, =1.0.0, =2.0.11, =0.8.0, =1.16.5, =1.0.1, =1.0.0, =1.0.0, =1.0.0...

helper_project (1.3.0), twitter-buddy (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via requst (0.0.1-security)

requst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requst and may be impacted: - helperproject 1.3.0 - twitter-buddy =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32121...

mycoin (1.0.0), simple-blockchain-implement (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via crytpo-js (0.0.1-security)

crytpo-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin 1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17770...

bassant-courses-manager (>=1.0.1, <=1.0.5), dxtest1 (>=1.0.0, <=1.0.2) +3 more potentially affected by unknown CVE via commender (0.0.1-security)

commender NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commender and may be impacted: - bassant-courses-manager =1.0.1, =1.0.0, =1.0.0, =1.0.1 - xy-xueyong-rkc 1.0.0 - zansanfeng123 1.0.0 Source cves: unknown CVE Source...

@c0b41/prettify-error (1.0.0), assume (>=0.0.10, <=1.4.0) +22 more potentially affected by unknown CVE via failing-code (>=0.0.2, <=0.1.0)

failing-code NPM version =0.0.2, =0.0.10, =7.1.0, =1.0.0, =0.1.1, =1.0.0, =0.0.1, =0.0.4 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-20162...

eksi-server (>=0.0.0, <=0.0.8), eksi-sozluk (>=0.0.0, <=0.0.13) +2 more potentially affected by unknown CVE via new-range (0.0.0)

new-range NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-range and may be impacted: - eksi-server =0.0.0, =0.0.0, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27367...

tea07-xokohero (1.0.1) potentially affected by unknown CVE via api-chatfb-test (0.0.1-security)

api-chatfb-test NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on api-chatfb-test and may be impacted: - tea07-xokohero 1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14640...

assume (>=0.0.10, <=1.4.0), atomify (>=7.1.0, <=7.3.1) +32 more potentially affected by unknown CVE via style-format (>=0.0.0, <=2.0.0)

style-format NPM version =0.0.0, =0.0.10, =7.1.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =0.0.0, =0.0.2 - fd-select 1.0.0 - frp-tick 1.0.0 - generator-freekerneljs 0.6.0 - hearing-aid 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-34115...

baluni (>=1.0.0, <=2.7.2), fast-publish (>=0.0.1-alpha.0, <=0.0.2) potentially affected by unknown CVE via chakl (0.0.1-security)

chakl NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chakl and may be impacted: - baluni =1.0.0, =0.0.1-alpha.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16766...

attr (>=0.0.0, <=0.0.1), door (>=0.0.5, <=0.0.6) +3 more potentially affected by unknown CVE via new-prop (2.0.0)

new-prop NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-prop and may be impacted: - attr =0.0.0, =0.0.5, =0.0.7, =0.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27365...

@kash_tt/common (>=1.0.1, <=1.1.236), @topperdev17/common (>=1.0.0, <=2.0.1) +6 more potentially affected by unknown CVE via typecript (0.0.1-security)

typecript NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on typecript and may be impacted: - @kashtt/common =1.0.1, =1.0.0, =1.0.3, =1.0.53, =0.0.1, =1.0.5, =1.0.14 - tant-intl-new 1.0.14 Source cves: unknown CVE Source advisor...

licensefile (1.1.1), myprick (>=1.0.0, <=1.1.0) potentially affected by unknown CVE via prick (0.0.1-security)

prick NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prick and may be impacted: - licensefile 1.1.1 - myprick =1.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29641...

domquery (>=1.0.0, <=1.0.1), hide (0.0.0) +3 more potentially affected by unknown CVE via style-dom (>=0.0.0, <=2.0.0)

style-dom NPM version =0.0.0, =1.0.0, =0.0.0, =0.0.2, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34114...

form-lab (0.1.3), nmt_databox (>=1.0.5, <=1.0.7) potentially affected by unknown CVE via instal (0.0.1-security)

instal NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on instal and may be impacted: - form-lab 0.1.3 - nmtdatabox =1.0.5, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23246...

nice-elements (>=1.1.2, <=1.13.5), olaii-web-common (>=1.0.0, <=1.0.33) potentially affected by unknown CVE via angular-truncate (0.0.1-security)

angular-truncate NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on angular-truncate and may be impacted: - nice-elements =1.1.2, =1.0.0, =1.0.33 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14532...

delegate-dom (>=0.0.0, <=0.0.1), dom-delegation-stream (0.0.0) +2 more potentially affected by unknown CVE via matches-dom-selector (0.0.0)

matches-dom-selector NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on matches-dom-selector and may be impacted: - delegate-dom =0.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25996...

@xizhouh/former (>=0.0.1, <=1.1.1), @xizhouh/formless (>=0.0.1, <=0.0.6) +1 more potentially affected by unknown CVE via set-object-path (2.0.1)

set-object-path NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on set-object-path and may be impacted: - @xizhouh/former =0.0.1, =0.0.1, =0.3.0, =0.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33017...

gezi-core (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via unique-now (0.0.1)

unique-now NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on unique-now and may be impacted: - gezi-core =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37825...

level-json-cache (0.0.0), midibin-api (0.0.0) +6 more potentially affected by unknown CVE via level-json (>=0.0.2, <=2.0.0)

level-json NPM version =0.0.2, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25199...

@dudadev/zip-modifier-utils (1.1.0), @newsssticketing/common (>=1.0.4, <=1.0.16) +4 more potentially affected by unknown CVE via experss (0.0.1-security)

experss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on experss and may be impacted: - @dudadev/zip-modifier-utils 1.1.0 - @newsssticketing/common =1.0.4, =2.0.1, =1.0.2, =1.0.6 Source cves: unknown CVE Source advisory:...

fox (>=0.0.7, <=0.0.8), one (>=1.7.0, <=2.5.2) +2 more potentially affected by unknown CVE via boxcars (>=0.0.6, <=2.0.0)

boxcars NPM version =0.0.6, =0.0.7, =1.7.0, =0.0.1, =0.3.1, =0.6.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16042...

one (>=1.1.2, <=1.7.8) potentially affected by unknown CVE via highkick (1.6.2)

highkick NPM version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on highkick and may be impacted: - one =1.1.2, =1.7.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22428...

brick (0.0.0), duo-parse (0.4.0) +4 more potentially affected by unknown CVE via memoize-sync (>=0.0.2, <=2.0.0)

memoize-sync NPM version =0.0.2, =0.0.9, =5.0.0, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26179...

cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-qa (>=0.3.0, <=2.3.0)

cli-qa NPM version =0.3.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17116...

@alu0101350158/constant-folding (>=1.0.0, <=1.3.9), @mp-next/build (>=0.0.1-alpha.27, <=0.0.1-alpha.34) +10 more potentially affected by unknown CVE via commmander (0.0.1-security)

commmander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commmander and may be impacted: - @alu0101350158/constant-folding =1.0.0, =0.0.1-alpha.27, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - velzy 0.0.1 - zhoukang-cli...

@aviationpast/niotest (>=1.0.1, <=1.0.17) potentially affected by unknown CVE via 4equest (0.0.1-security)

4equest NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on 4equest and may be impacted: - @aviationpast/niotest =1.0.1, =1.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-7012...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via read-cli-input (1.0.1)

read-cli-input NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on read-cli-input and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31878...

@purplegate/chat-sdk (>=1.0.7, <=1.0.8), mock-json-response (1.0.9) potentially affected by unknown CVE via rimraff (0.0.1-security)

rimraff NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on rimraff and may be impacted: - @purplegate/chat-sdk =1.0.7, =1.0.8 - mock-json-response 1.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32235...

rs265_text-based-adventure-game (>=1.0.4, <=1.0.6) potentially affected by unknown CVE via halk (0.0.1-security)

halk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on halk and may be impacted: - rs265text-based-adventure-game =1.0.4, =1.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22133...

brick-node (>=0.0.0, <=0.0.3) potentially affected by unknown CVE via brick-browserify-plugin (>=0.0.0, <=0.0.1)

brick-browserify-plugin NPM version =0.0.0, =0.0.0, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16164...

ni3ba45_marksheet (1.0.8), zain-khan-179-simple-calculator (>=1.0.0, <=2.1.0) potentially affected by unknown CVE via cahlk (0.0.1-security)

cahlk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on cahlk and may be impacted: - ni3ba45marksheet 1.0.8 - zain-khan-179-simple-calculator =1.0.0, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16430...

change-object (0.0.0), cli-qa (2.0.0) +7 more potentially affected by unknown CVE via filter-stack (0.0.0)

filter-stack NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on filter-stack and may be impacted: - change-object 0.0.0 - cli-qa 2.0.0 - comma-list 0.0.0 - fd-select 1.0.0 - frp-tick 1.0.0 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 ...

atd-browser-support (>=1.0.0, <=1.0.11), atd-deprecated-polyfills (>=0.0.3, <=1.0.8) +3 more potentially affected by unknown CVE via placeholder.js (>=2.0.1, <=3.1.0)

placeholder.js NPM version =2.0.1, =1.0.0, =0.0.3, =0.0.1, =0.0.2 - vue-placeholder.js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29354...

as-design-v1 (1.0.0) potentially affected by unknown CVE via preinstall (0.0.1-security)

preinstall NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on preinstall and may be impacted: - as-design-v1 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29612...

@goodboydigital/fido-build (>=3.0.0, <=13.2.0), @olympeio-extensions/sustain (>=2.11.5, <=2.15.0) +15 more potentially affected by unknown CVE via bable-loader (0.0.1-security)

bable-loader NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bable-loader and may be impacted: - @goodboydigital/fido-build =3.0.0, =2.11.5, =0.0.6-dev, =0.0.2, =0.0.2, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 a...

alert (>=0.0.0, <=0.0.1), audio-play (1.0.0) +13 more potentially affected by unknown CVE via new-chain (>=0.0.0, <=2.0.0)

new-chain NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.1, =0.0.0, =0.0.9, =0.0.0, =3.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27356...

userbook (>=0.2.0, <=0.2.6) potentially affected by unknown CVE via propertify (0.0.0)

propertify NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on propertify and may be impacted: - userbook =0.2.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30750...

snsadmin (1.0.0) potentially affected by unknown CVE via soket.io (0.0.1-security)

soket.io NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on soket.io and may be impacted: - snsadmin 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33611...

one (>=1.1.2, <=1.8.2), plv8x (>=0.3.1, <=0.3.2) potentially affected by unknown CVE via genpkg (0.0.3)

genpkg NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on genpkg and may be impacted: - one =1.1.2, =0.3.1, =0.3.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-21327...