packagesss (1.0.0) potentially affected by unknown CVE via ldash (0.0.1-security)

ldash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldash and may be impacted: - packagesss 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25004...

brick-node (>=0.0.0, <=0.0.17) potentially affected by unknown CVE via categorize-files (0.0.1)

categorize-files NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on categorize-files and may be impacted: - brick-node =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16663...

big-integer-max (1.0.0), big-integer-min (>=1.0.0, <=1.0.1) +25 more potentially affected by unknown CVE via just-next-tick (0.0.0)

just-next-tick NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-next-tick and may be impacted: - big-integer-max 1.0.0 - big-integer-min =1.0.0, =0.0.3, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.9 and more Source cves: unknown CVE Sour...

xiaojs-5tools (>=1.0.5, <=1.0.6) potentially affected by unknown CVE via reatc (0.0.1-security)

reatc NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reatc and may be impacted: - xiaojs-5tools =1.0.5, =1.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31897...

gezi-core (>=0.0.0, <=0.0.2), less-common-words (0.0.0) +1 more potentially affected by unknown CVE via most-common-words (2.0.0)

most-common-words NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on most-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - less-common-words 0.0.0 - meta-tags 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-267...

go-api-starter (>=0.0.0, <=1.3.0), redux-starter (>=0.0.0, <=1.1.0) potentially affected by unknown CVE via kik-starter (>=0.0.1, <=2.2.1)

kik-starter NPM version =0.0.1, =0.0.0, =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24454...

fstlncomponent (>=1.0.1, <=1.0.7) potentially affected by unknown CVE via plugin-sass (0.0.1-security)

plugin-sass NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-sass and may be impacted: - fstlncomponent =1.0.1, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29416...

@baosight/xinrong (>=0.0.36, <=0.0.37), npm_1st_publish (1.0.0) +1 more potentially affected by unknown CVE via jqeury (0.0.1-security)

jqeury NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jqeury and may be impacted: - @baosight/xinrong =0.0.36, =0.0.37 - npm1stpublish 1.0.0 - wypulldom 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23891...

@tgticketing/common (>=1.0.2, <=1.0.25), pirvp (1.0.0) potentially affected by unknown CVE via exrpess (0.0.1-security)

exrpess NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on exrpess and may be impacted: - @tgticketing/common =1.0.2, =1.0.25 - pirvp 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20101...

23march (1.0.0), @castyiglitchxz/alert-box-package (>=1.0.0, <=1.2.5) +30 more potentially affected by unknown CVE via node.js (0.0.1-security)

node.js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node.js and may be impacted: - 23march 1.0.0 - @castyiglitchxz/alert-box-package =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.1, =1.0.5, =1.0.0, =1.2.5, =1.2.1, =0.0.1, =2.2.0,...

kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-form (0.1.4)

cli-form NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...

level-json (>=0.0.4, <=1.0.0), scrape-eksi (>=0.0.0, <=0.0.1) +2 more potentially affected by unknown CVE via level-client (>=0.0.1, <=1.0.0)

level-client NPM version =0.0.1, =0.0.4, =0.0.0, =0.2.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25197...

evy-fanyi (>=0.0.1, <=0.0.2), starry_icon_tool (1.0.0) potentially affected by unknown CVE via langdet (0.0.1-security)

langdet NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on langdet and may be impacted: - evy-fanyi =0.0.1, =0.0.2 - starryicontool 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24945...

brick (0.0.0), brick-node (>=0.0.0, <=0.0.17) +18 more potentially affected by unknown CVE via uniques (>=0.0.0, <=0.0.1)

uniques NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.9, =0.0.0, =1.1.0, =2.7.12 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-37826...

dep_grap_gen (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via shalk (0.0.1-security)

shalk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on shalk and may be impacted: - depgrapgen =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33056...

watch-array (>=0.0.0, <=0.0.4) potentially affected by unknown CVE via new-list (>=0.0.5, <=2.0.0)

new-list NPM version =0.0.5, =0.0.0, =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27362...

bakpiabathok-3 (1.1.6), bonteng-1 (1.1.6) +1 more potentially affected by unknown CVE via bonteng (0.0.1-security)

bonteng NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bonteng and may be impacted: - bakpiabathok-3 1.1.6 - bonteng-1 1.1.6 - kolekcau-2 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15953...

bud-live-server (>=0.0.0, <=0.0.5), just-a-browserify-server (>=0.0.0, <=1.0.0) potentially affected by unknown CVE via just-a-server (>=0.0.0, <=0.0.1)

just-a-server NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24109...

risczero-01 (1.0.0), tea02-ddomutrr (1.0.1) +14 more potentially affected by unknown CVE via api-chatfb (0.0.1-security)

api-chatfb NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on api-chatfb and may be impacted: - risczero-01 1.0.0 - tea02-ddomutrr 1.0.1 - tea03-zhangmaxq 1.0.1 - tea05-armyben66 1.0.2 - tea06-meogak88 1.0.1 - tea07-xokohero...

bud (>=0.0.0, <=0.1.2), declarative-js (>=0.0.0, <=0.0.2) +3 more potentially affected by unknown CVE via new-partial (0.0.1)

new-partial NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on new-partial and may be impacted: - bud =0.0.0, =0.0.0, =0.0.1, =0.0.0, =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27364...

1yoouoo (>=0.0.5, <=0.1.2), bluebottle-magento-marketplace (>=1.1.2, <=1.2.5) +6 more potentially affected by unknown CVE via module-name (0.0.1-security)

module-name NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on module-name and may be impacted: - 1yoouoo =0.0.5, =1.1.2, =0.0.2, =1.0.1, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26605...

deletenewf (1.0.0), itheima-tool-time (1.0.0) +1 more potentially affected by unknown CVE via jquey (0.0.1-security)

jquey NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jquey and may be impacted: - deletenewf 1.0.0 - itheima-tool-time 1.0.0 - untitledfedorsh 1.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23906...

sutter-rdd-authentication (>=0.1.0, <=0.2.1) potentially affected by unknown CVE via sutter-rdd-services (0.0.1-security)

sutter-rdd-services NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on sutter-rdd-services and may be impacted: - sutter-rdd-authentication =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34247...

brick (0.0.0), brick-node (>=0.0.0, <=0.0.17) potentially affected by unknown CVE via mime-of (0.1.0)

mime-of NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mime-of and may be impacted: - brick 0.0.0 - brick-node =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26376...

@akaiv/core (>=1.2.6, <=1.8.3), @akaiv/discord-client (>=1.0.0, <=1.4.1) +3 more potentially affected by unknown CVE via minimst (0.0.1-security)

minimst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on minimst and may be impacted: - @akaiv/core =1.2.6, =1.0.0, =0.1.0, =0.4.0 - @akaiv/kakao-client 2.0.1 - netlify-minutes 0.1.0 Source cves: unknown CVE Source advisory:...

containervisibleonclickbymobe (1.0.0) potentially affected by unknown CVE via webpac (0.0.1-security)

webpac NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on webpac and may be impacted: - containervisibleonclickbymobe 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39019...

@naologic/design (>=1.0.5, <=1.1.4) potentially affected by unknown CVE via iodash (0.0.1-security)

iodash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on iodash and may be impacted: - @naologic/design =1.0.5, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23307...

cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via config-doc (0.1.0)

config-doc NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on config-doc and may be impacted: - cli-form =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17474...

duba (>=0.0.0, <=0.0.2), userbook (>=0.1.0, <=0.2.6) potentially affected by unknown CVE via checkfor (>=0.0.3, <=0.0.4)

checkfor NPM version =0.0.3, =0.0.0, =0.1.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16880...

devel_core (>=0.0.1, <=0.0.8) potentially affected by unknown CVE via requets (0.0.1-security)

requets NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requets and may be impacted: - develcore =0.0.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32115...

cli-form (>=0.1.0, <=0.1.4), cli-qa (>=2.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via comma-list (>=0.0.0, <=0.0.1)

comma-list NPM version =0.0.0, =0.1.0, =2.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17400...

gulp-jsify (0.1.0) potentially affected by unknown CVE via jsify (0.0.4)

jsify NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on jsify and may be impacted: - gulp-jsify 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23947...

20210816-test (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via lodah (0.0.1-security)

lodah NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodah and may be impacted: - 20210816-test =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25501...

com.prototyper.openai-editor-tool (0.1.3) potentially affected by unknown CVE via com.unity.nuget.newtonsoft-json (0.0.1-security)

com.unity.nuget.newtonsoft-json NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on com.unity.nuget.newtonsoft-json and may be impacted: - com.prototyper.openai-editor-tool 0.1.3 Source cves: unknown CVE Source advisory:...

s-collection.js (1.0.0) potentially affected by unknown CVE via lodash.js (0.0.1-security)

lodash.js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodash.js and may be impacted: - s-collection.js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25506...

jl-wechat-sdk (>=1.0.0, <=1.2.3) potentially affected by unknown CVE via crpyto-js (0.0.1-security)

crpyto-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crpyto-js and may be impacted: - jl-wechat-sdk =1.0.0, =1.2.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17718...

fd-dcc (>=1.0.0, <=2.1.4), test_sdk_aki (>=1.0.3, <=1.0.4) +1 more potentially affected by unknown CVE via axioss (0.0.1-security)

axioss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axioss and may be impacted: - fd-dcc =1.0.0, =1.0.3, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15242...

@mattdesl/quick-stub (>=1.0.0, <=3.0.1), brick (0.0.0) +15 more potentially affected by unknown CVE via variable-name (>=0.0.1, <=0.0.2)

variable-name NPM version =0.0.1, =1.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =1.0.0, =0.0.0, =1.2.0, =7.0.0, =1.0.0, =0.0.0, =1.1.1, =1.0.0, =1.9.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-38145...

scraping-eksi (>=0.0.0, <=1.0.1) potentially affected by unknown CVE via limited-parallel-loop (0.0.0)

limited-parallel-loop NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on limited-parallel-loop and may be impacted: - scraping-eksi =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25373...

srb2kartjs (>=2.2.7, <=2.2.9) potentially affected by unknown CVE via ldoash (0.0.1-security)

ldoash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldoash and may be impacted: - srb2kartjs =2.2.7, =2.2.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25007...

@luxiaodan/el-selection-tree-table (1.0.3) potentially affected by unknown CVE via lodsah (0.0.1-security)

lodsah NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodsah and may be impacted: - @luxiaodan/el-selection-tree-table 1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25516...

react-calendar1 (>=0.1.0, <=1.1.4) potentially affected by unknown CVE via react-google-calendar-events (0.0.1-security)

react-google-calendar-events NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-google-calendar-events and may be impacted: - react-calendar1 =0.1.0, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31791...

brick (0.0.0), brick-node (>=0.0.0, <=0.0.17) +34 more potentially affected by unknown CVE via local-debug (>=0.0.0, <=2.0.0)

local-debug NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.7, =0.0.0, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25478...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +29 more potentially affected by unknown CVE via show-version (>=0.0.0, <=2.0.0)

show-version NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33163...

my-testutil (1.0.1), storm-test (0.0.1) +1 more potentially affected by unknown CVE via wepack-cli (0.0.1-security)

wepack-cli NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wepack-cli and may be impacted: - my-testutil 1.0.1 - storm-test 0.0.1 - stormydb =0.1.1, =0.5.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39082...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +2 more potentially affected by unknown CVE via on-key-press (0.0.0)

on-key-press NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on on-key-press and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28228...

brick-node (>=0.0.8, <=0.0.17), bud (0.0.3) +18 more potentially affected by unknown CVE via new-command (>=0.0.0, <=2.0.0)

new-command NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.3, =0.0.4, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27359...

assume (>=0.0.10, <=1.4.0), atomify (>=7.1.0, <=7.3.1) +18 more potentially affected by unknown CVE via prettify-error (0.1.1)

prettify-error NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on prettify-error and may be impacted: - assume =0.0.10, =7.1.0, =1.0.0, =1.0.0, =0.0.1, =0.0.10, =1.16.0, =3.0.0 and more Source cves: unknown CVE Source advisory:...

circle (>=0.0.0, <=0.0.9), democirclepackage (1.0.3) +3 more potentially affected by unknown CVE via post-data (0.0.0)

post-data NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on post-data and may be impacted: - circle =0.0.0, =0.0.40, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29531...

gezi-core (>=0.0.0, <=0.0.2), meta-tags (0.0.0) potentially affected by unknown CVE via less-common-words (0.0.0)

less-common-words NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on less-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - meta-tags 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25174...