@kash_tt/common (>=1.0.1, <=1.1.236), @topperdev17/common (>=1.0.0, <=2.0.1) +6 more potentially affected by unknown CVE via typecript (0.0.1-security)

typecript NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on typecript and may be impacted: - @kashtt/common =1.0.1, =1.0.0, =1.0.3, =1.0.53, =0.0.1, =1.0.5, =1.0.14 - tant-intl-new 1.0.14 Source cves: unknown CVE Source advisor...

rs265_text-based-adventure-game (>=1.0.4, <=1.0.6) potentially affected by unknown CVE via halk (0.0.1-security)

halk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on halk and may be impacted: - rs265text-based-adventure-game =1.0.4, =1.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22133...

atd-browser-support (>=1.0.0, <=1.0.11), atd-deprecated-polyfills (>=0.0.3, <=1.0.8) +3 more potentially affected by unknown CVE via placeholder.js (>=2.0.1, <=3.1.0)

placeholder.js NPM version =2.0.1, =1.0.0, =0.0.3, =0.0.1, =0.0.2 - vue-placeholder.js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29354...

domquery (>=1.0.0, <=1.0.1), hide (0.0.0) +3 more potentially affected by unknown CVE via style-dom (>=0.0.0, <=2.0.0)

style-dom NPM version =0.0.0, =1.0.0, =0.0.0, =0.0.2, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34114...

swagger-koa88 (>=1.0.2, <=1.0.5-0), windows10-electron-vibrancy (>=1.0.0, <=1.0.1) +1 more potentially affected by unknown CVE via coffe-script (0.0.1-security)

coffe-script NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on coffe-script and may be impacted: - swagger-koa88 =1.0.2, =1.0.0, =1.0.5, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17263...

03_node_1 (1.0.0), 111nodejs03 (1.0.0) +97 more potentially affected by unknown CVE via math (0.0.3)

math NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on math and may be impacted: - 03node1 1.0.0 - 111nodejs03 1.0.0 - @daostack/arc =0.0.1-rc.21, =0.0.1-rc.41-v2, =1.0.1, =1.0.0, =2.0.11, =0.8.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-auth (1.0.1-alpha.1)

h1-cli-ext-root-auth NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-auth and may be impacted: - h1-cli-device-node =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22080...

@c0b41/prettify-error (1.0.0), assume (>=0.0.10, <=1.4.0) +22 more potentially affected by unknown CVE via failing-code (>=0.0.2, <=0.1.0)

failing-code NPM version =0.0.2, =0.0.10, =7.1.0, =1.0.0, =0.1.1, =1.0.0, =0.0.1, =0.0.4 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-20162...

gezi-core (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via unique-now (0.0.1)

unique-now NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on unique-now and may be impacted: - gezi-core =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37825...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +13 more potentially affected by unknown CVE via mix-objects (>=0.0.2, <=0.0.3)

mix-objects NPM version =0.0.2, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =2.0.0, =0.0.4-1.1, =4.5.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26507...

mycoin (1.0.0), simple-blockchain-implement (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via crytpo-js (0.0.1-security)

crytpo-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin 1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17770...

@dudadev/zip-modifier-utils (1.1.0), @newsssticketing/common (>=1.0.4, <=1.0.16) +4 more potentially affected by unknown CVE via experss (0.0.1-security)

experss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on experss and may be impacted: - @dudadev/zip-modifier-utils 1.1.0 - @newsssticketing/common =1.0.4, =2.0.1, =1.0.2, =1.0.6 Source cves: unknown CVE Source advisory:...

@chumbas/common (>=1.0.3, <=1.0.4), @safnode/common (1.0.3) potentially affected by unknown CVE via expess (0.0.1-security)

expess NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on expess and may be impacted: - @chumbas/common =1.0.3, =1.0.4 - @safnode/common 1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20061...

@artemislunapatron/common (>=1.0.4, <=1.0.14), pwp-core (>=1.0.0, <=1.2.4) +1 more potentially affected by unknown CVE via exprss (0.0.1-security)

exprss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on exprss and may be impacted: - @artemislunapatron/common =1.0.4, =1.0.0, =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20100...

@alu0101350158/constant-folding (>=1.0.0, <=1.3.9), @mp-next/build (>=0.0.1-alpha.27, <=0.0.1-alpha.34) +10 more potentially affected by unknown CVE via commmander (0.0.1-security)

commmander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commmander and may be impacted: - @alu0101350158/constant-folding =1.0.0, =0.0.1-alpha.27, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - velzy 0.0.1 - zhoukang-cli...

@xizhouh/former (>=0.0.1, <=1.1.1), @xizhouh/formless (>=0.0.1, <=0.0.6) +1 more potentially affected by unknown CVE via set-object-path (2.0.1)

set-object-path NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on set-object-path and may be impacted: - @xizhouh/former =0.0.1, =0.0.1, =0.3.0, =0.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33017...

@goodboydigital/fido-build (>=3.0.0, <=13.2.0), @olympeio-extensions/sustain (>=2.11.5, <=2.15.0) +15 more potentially affected by unknown CVE via bable-loader (0.0.1-security)

bable-loader NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bable-loader and may be impacted: - @goodboydigital/fido-build =3.0.0, =2.11.5, =0.0.6-dev, =0.0.2, =0.0.2, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 a...

@cnbritain/merlin-www-build-tools (0.1.2), auto_cep (>=1.0.0, <=1.0.2) +5 more potentially affected by unknown CVE via browsersync (0.0.1-security)

browsersync NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on browsersync and may be impacted: - @cnbritain/merlin-www-build-tools 0.1.2 - autocep =1.0.0, =1.0.114, =1.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source...

gezi-core (>=0.0.0, <=0.0.2), kik-starter (>=2.1.0, <=2.2.0) potentially affected by unknown CVE via parallelly (>=0.0.1, <=0.1.0)

parallelly NPM version =0.0.1, =0.0.0, =2.1.0, =2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28866...

licensefile (1.1.1), myprick (>=1.0.0, <=1.1.0) potentially affected by unknown CVE via prick (0.0.1-security)

prick NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prick and may be impacted: - licensefile 1.1.1 - myprick =1.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29641...

ni3ba45_marksheet (1.0.8), zain-khan-179-simple-calculator (>=1.0.0, <=2.1.0) potentially affected by unknown CVE via cahlk (0.0.1-security)

cahlk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on cahlk and may be impacted: - ni3ba45marksheet 1.0.8 - zain-khan-179-simple-calculator =1.0.0, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16430...

platzi-virtual-machine (1.0.0) potentially affected by unknown CVE via pvm (0.0.1-security)

pvm NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on pvm and may be impacted: - platzi-virtual-machine 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30899...

-price-checker (>=1.0.0, <=1.0.5), 003-gas-convert (1.0.1) +17827 more potentially affected by unknown CVE via fs (>=0.0.0, <=0.0.2)

fs NPM version =0.0.0, =1.0.0, =1.0.0, =0.0.21, =1.0.0, =0.3.96, =1.0.2 - 2.4-qr-code-project 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-21003...

bismagul_project08_quiz (>=1.0.0, <=1.0.1), cli-advanture-game (1.0.0) +5 more potentially affected by unknown CVE via calk (0.0.1-security)

calk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on calk and may be impacted: - bismagulproject08quiz =1.0.0, =1.0.0, =1.0.0, =1.0.1 - todoterminallist 1.0.0 - zhs-cli-advanture-game 1.0.0 Source cves: unknown CVE Source...

as-design-v1 (1.0.0) potentially affected by unknown CVE via preinstall (0.0.1-security)

preinstall NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on preinstall and may be impacted: - as-design-v1 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29612...

@aviationpast/niotest (>=1.0.1, <=1.0.17) potentially affected by unknown CVE via 4equest (0.0.1-security)

4equest NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on 4equest and may be impacted: - @aviationpast/niotest =1.0.1, =1.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-7012...

use-rtg (>=1.0.1, <=1.0.3) potentially affected by unknown CVE via observed-bits (0.3.1)

observed-bits NPM version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on observed-bits and may be impacted: - use-rtg =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28060...

snsadmin (1.0.0) potentially affected by unknown CVE via soket.io (0.0.1-security)

soket.io NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on soket.io and may be impacted: - snsadmin 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33611...

helper_project (1.3.0), twitter-buddy (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via requst (0.0.1-security)

requst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requst and may be impacted: - helperproject 1.3.0 - twitter-buddy =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32121...

eksi-server (>=0.0.0, <=0.0.8), eksi-sozluk (>=0.0.0, <=0.0.13) +2 more potentially affected by unknown CVE via new-range (0.0.0)

new-range NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-range and may be impacted: - eksi-server =0.0.0, =0.0.0, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27367...

attr (>=0.0.0, <=0.0.1), door (>=0.0.5, <=0.0.6) +3 more potentially affected by unknown CVE via new-prop (2.0.0)

new-prop NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-prop and may be impacted: - attr =0.0.0, =0.0.5, =0.0.7, =0.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27365...

memoize-with-leveldb (>=0.0.0, <=0.0.1), radio-paradise-api (>=0.0.0, <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0, <=2.0.0)

level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25200...

level-json-cache (0.0.0), midibin-api (0.0.0) +6 more potentially affected by unknown CVE via level-json (>=0.0.2, <=2.0.0)

level-json NPM version =0.0.2, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25199...

change-object (0.0.0), cli-qa (2.0.0) +7 more potentially affected by unknown CVE via filter-stack (0.0.0)

filter-stack NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on filter-stack and may be impacted: - change-object 0.0.0 - cli-qa 2.0.0 - comma-list 0.0.0 - fd-select 1.0.0 - frp-tick 1.0.0 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 ...

userbook (>=0.2.0, <=0.2.6) potentially affected by unknown CVE via propertify (0.0.0)

propertify NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on propertify and may be impacted: - userbook =0.2.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30750...

nice-elements (>=1.1.2, <=1.13.5), olaii-web-common (>=1.0.0, <=1.0.33) potentially affected by unknown CVE via angular-truncate (0.0.1-security)

angular-truncate NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on angular-truncate and may be impacted: - nice-elements =1.1.2, =1.0.0, =1.0.33 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14532...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +30 more potentially affected by unknown CVE via show-help (>=0.0.0, <=2.0.1)

show-help NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =1.1.0, =1.1.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33162...

alert (>=0.0.0, <=0.0.1), audio-play (1.0.0) +13 more potentially affected by unknown CVE via new-chain (>=0.0.0, <=2.0.0)

new-chain NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.1, =0.0.0, =0.0.9, =0.0.0, =3.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27356...

fox (>=0.0.7, <=0.0.8), one (>=1.7.0, <=2.5.2) +2 more potentially affected by unknown CVE via boxcars (>=0.0.6, <=2.0.0)

boxcars NPM version =0.0.6, =0.0.7, =1.7.0, =0.0.1, =0.3.1, =0.6.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16042...

one (>=1.1.2, <=1.8.2), plv8x (>=0.3.1, <=0.3.2) potentially affected by unknown CVE via genpkg (0.0.3)

genpkg NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on genpkg and may be impacted: - one =1.1.2, =0.3.1, =0.3.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-21327...

bassant-courses-manager (>=1.0.1, <=1.0.5), dxtest1 (>=1.0.0, <=1.0.2) +3 more potentially affected by unknown CVE via commender (0.0.1-security)

commender NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commender and may be impacted: - bassant-courses-manager =1.0.1, =1.0.0, =1.0.0, =1.0.1 - xy-xueyong-rkc 1.0.0 - zansanfeng123 1.0.0 Source cves: unknown CVE Source...

one (>=1.1.2, <=1.7.8) potentially affected by unknown CVE via highkick (1.6.2)

highkick NPM version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on highkick and may be impacted: - one =1.1.2, =1.7.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22428...

gulu-ui (>=0.0.6, <=0.0.7) potentially affected by unknown CVE via dev-test (0.0.1-security)

dev-test NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on dev-test and may be impacted: - gulu-ui =0.0.6, =0.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-18345...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +11 more potentially affected by unknown CVE via new-struct (>=0.0.4, <=0.1.1)

new-struct NPM version =0.0.4, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27369...

tea07-xokohero (1.0.1) potentially affected by unknown CVE via api-chatfb-test (0.0.1-security)

api-chatfb-test NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on api-chatfb-test and may be impacted: - tea07-xokohero 1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14640...

kik (>=0.0.0, <=1.3.0), kik-starter (2.2.0) potentially affected by unknown CVE via install-module (>=0.2.0, <=1.1.0)

install-module NPM version =0.2.0, =0.0.0, =1.3.0 - kik-starter 2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23249...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +20 more potentially affected by unknown CVE via default-debug (>=0.0.0, <=2.0.0)

default-debug NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-18178...

simple-basic-react-button (0.1.0) potentially affected by unknown CVE via prpo-types (0.0.1-security)

prpo-types NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prpo-types and may be impacted: - simple-basic-react-button 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30788...

vce-terminal (>=1.2.4, <=1.2.8) potentially affected by unknown CVE via eletron (0.0.1-security)

eletron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eletron and may be impacted: - vce-terminal =1.2.4, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19514...

@htmlgoddess/cli (>=0.3.5, <=0.4.4), @htmlgoddess/webpack-plugin (>=0.1.0, <=0.4.4) +24 more potentially affected by unknown CVE via babel-node (0.0.1-security)

babel-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-node and may be impacted: - @htmlgoddess/cli =0.3.5, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.2.0, =0.0.1, =0.0.7, =0.2.9, =0.5.2 and more Source cves: unknown CVE...