@goodboydigital/fido-build (>=3.0.0, <=13.2.0), @olympeio-extensions/sustain (>=2.11.5, <=2.15.0) +15 more potentially affected by unknown CVE via bable-loader (0.0.1-security)

bable-loader NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bable-loader and may be impacted: - @goodboydigital/fido-build =3.0.0, =2.11.5, =0.0.6-dev, =0.0.2, =0.0.2, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 a...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +13 more potentially affected by unknown CVE via mix-objects (>=0.0.2, <=0.0.3)

mix-objects NPM version =0.0.2, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =2.0.0, =0.0.4-1.1, =4.5.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26507...

helper_project (1.3.0), twitter-buddy (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via requst (0.0.1-security)

requst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requst and may be impacted: - helperproject 1.3.0 - twitter-buddy =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32121...

gezi-core (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via unique-now (0.0.1)

unique-now NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on unique-now and may be impacted: - gezi-core =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37825...

@dudadev/zip-modifier-utils (1.1.0), @newsssticketing/common (>=1.0.4, <=1.0.16) +4 more potentially affected by unknown CVE via experss (0.0.1-security)

experss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on experss and may be impacted: - @dudadev/zip-modifier-utils 1.1.0 - @newsssticketing/common =1.0.4, =2.0.1, =1.0.2, =1.0.6 Source cves: unknown CVE Source advisory:...

h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-auth (1.0.1-alpha.1)

h1-cli-ext-root-auth NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-auth and may be impacted: - h1-cli-device-node =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22080...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +11 more potentially affected by unknown CVE via new-struct (>=0.0.4, <=0.1.1)

new-struct NPM version =0.0.4, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27369...

@biuauth/modal (>=6.1.2, <=6.2.1), @biuauth/ui (>=6.2.0, <=6.2.11) +6 more potentially affected by unknown CVE via reat (0.0.1-security)

reat NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reat and may be impacted: - @biuauth/modal =6.1.2, =6.2.0, =6.1.23, =1.0.0, =2.0.8, =1.1.1, =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31896...

assume (>=0.0.10, <=1.4.0), atomify (>=7.1.0, <=7.3.1) +32 more potentially affected by unknown CVE via style-format (>=0.0.0, <=2.0.0)

style-format NPM version =0.0.0, =0.0.10, =7.1.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =0.0.0, =0.0.2 - fd-select 1.0.0 - frp-tick 1.0.0 - generator-freekerneljs 0.6.0 - hearing-aid 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-34115...

cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-qa (>=0.3.0, <=2.3.0)

cli-qa NPM version =0.3.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17116...

userbook (>=0.2.0, <=0.2.6) potentially affected by unknown CVE via propertify (0.0.0)

propertify NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on propertify and may be impacted: - userbook =0.2.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30750...

-price-checker (>=1.0.0, <=1.0.5), 003-gas-convert (1.0.1) +17825 more potentially affected by unknown CVE via fs (>=0.0.0, <=0.0.2)

fs NPM version =0.0.0, =1.0.0, =1.0.0, =0.0.21, =1.0.0, =0.3.96, =1.0.2 - 2.4-qr-code-project 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-21003...

@alu0101350158/constant-folding (>=1.0.0, <=1.3.9), @mp-next/build (>=0.0.1-alpha.27, <=0.0.1-alpha.34) +10 more potentially affected by unknown CVE via commmander (0.0.1-security)

commmander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commmander and may be impacted: - @alu0101350158/constant-folding =1.0.0, =0.0.1-alpha.27, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - velzy 0.0.1 - zhoukang-cli...

rs265_text-based-adventure-game (>=1.0.4, <=1.0.6) potentially affected by unknown CVE via halk (0.0.1-security)

halk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on halk and may be impacted: - rs265text-based-adventure-game =1.0.4, =1.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22133...

brick (0.0.0), duo-parse (0.4.0) +4 more potentially affected by unknown CVE via memoize-sync (>=0.0.2, <=2.0.0)

memoize-sync NPM version =0.0.2, =0.0.9, =5.0.0, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26179...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via read-cli-input (1.0.1)

read-cli-input NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on read-cli-input and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31878...

brick-node (>=0.0.0, <=0.0.3) potentially affected by unknown CVE via brick-browserify-plugin (>=0.0.0, <=0.0.1)

brick-browserify-plugin NPM version =0.0.0, =0.0.0, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16164...

one (>=1.1.2, <=1.7.8) potentially affected by unknown CVE via highkick (1.6.2)

highkick NPM version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on highkick and may be impacted: - one =1.1.2, =1.7.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22428...

shell-jobs (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via next-time (>=0.0.0, <=0.0.1)

next-time NPM version =0.0.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27399...

@quailjs/quail-core (>=0.0.17, <=0.0.21), assume (>=0.0.10, <=1.4.0) +62 more potentially affected by unknown CVE via format-text (>=0.0.3, <=2.0.0)

format-text NPM version =0.0.3, =0.0.17, =0.0.10, =7.1.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =0.0.0, =2.3.0 - codemirror-console-ui 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-20789...

h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) +2 more potentially affected by unknown CVE via h1-cli-core (1.0.1-alpha.1)

h1-cli-core NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-core and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Sourc...

@itutoring/itutoring_application_js_api (>=1.3.3, <=1.20.7), html-to-unicode (>=1.0.0, <=1.0.2) +2 more potentially affected by unknown CVE via reacct (0.0.1-security)

reacct NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reacct and may be impacted: - @itutoring/itutoringapplicationjsapi =1.3.3, =1.0.0, =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31760...

@deck/app (>=1.0.1, <=1.4.11), octophant (0.1.0) potentially affected by unknown CVE via rimraf-glob (0.0.0)

rimraf-glob NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on rimraf-glob and may be impacted: - @deck/app =1.0.1, =1.4.11 - octophant 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32233...

docusign-jsx (1.0.0), word-replace-contabil (>=1.0.1, <=1.0.9) potentially affected by unknown CVE via word2pdf (0.0.1-security)

word2pdf NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on word2pdf and may be impacted: - docusign-jsx 1.0.0 - word-replace-contabil =1.0.1, =1.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39417...

kik (>=0.2.0, <=1.3.0) potentially affected by unknown CVE via to-class-name (0.0.0)

to-class-name NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-class-name and may be impacted: - kik =0.2.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37001...

bud-babelify (>=0.0.1, <=1.0.0) potentially affected by unknown CVE via bud-browserify (>=0.4.4, <=2.0.0)

bud-browserify NPM version =0.4.4, =0.0.1, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16253...

brick-node (>=0.0.0, <=0.0.17), tinkr-cli (>=0.0.1, <=0.0.9) potentially affected by unknown CVE via ignore-doc (>=0.0.0, <=0.0.1)

ignore-doc NPM version =0.0.0, =0.0.0, =0.0.1, =0.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23012...

cassandra-query (>=1.0.1, <=1.0.3), toobatel-bot-lib-js (1.0.0) potentially affected by unknown CVE via blubird (0.0.1-security)

blubird NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on blubird and may be impacted: - cassandra-query =1.0.1, =1.0.3 - toobatel-bot-lib-js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15874...

simple-basic-react-button (0.1.0) potentially affected by unknown CVE via prpo-types (0.0.1-security)

prpo-types NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prpo-types and may be impacted: - simple-basic-react-button 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30788...

alert (>=0.0.0, <=0.0.1), background-image (0.0.0) +40 more potentially affected by unknown CVE via new-format (>=0.0.1, <=2.0.0)

new-format NPM version =0.0.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.3.0, =0.0.0, =0.0.10, =0.0.0, =0.0.0, =0.0.0, =0.0.13 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27361...

change-object (0.0.0) potentially affected by unknown CVE via change-object-path (0.0.1)

change-object-path NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on change-object-path and may be impacted: - change-object 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16781...

react-endless (>=1.0.4, <=1.0.6), react-templet (>=1.0.0, <=1.0.3) potentially affected by unknown CVE via epress (0.0.1-security)

epress NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epress and may be impacted: - react-endless =1.0.4, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19723...

artery-routes-docs (>=0.0.2, <=0.0.25), arteryjs (0.0.0) +5 more potentially affected by unknown CVE via to-slug (0.0.0)

to-slug NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-slug and may be impacted: - artery-routes-docs =0.0.2, =0.2.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37002...

brick-node (>=0.0.0, <=0.0.17), change-object (0.0.0) +8 more potentially affected by unknown CVE via stream-format (0.0.3)

stream-format NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on stream-format and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34079...

failing-line (0.0.1), mp3s (0.0.0) +3 more potentially affected by unknown CVE via findall (0.0.4)

findall NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on findall and may be impacted: - failing-line 0.0.1 - mp3s 0.0.0 - ourtunes =0.0.0, =0.0.2, =0.0.3, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20572...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +20 more potentially affected by unknown CVE via default-debug (>=0.0.0, <=2.0.0)

default-debug NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-18178...

ourtunes (>=0.0.0, <=1.1.0) potentially affected by unknown CVE via play-url (0.0.5)

play-url NPM version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on play-url and may be impacted: - ourtunes =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29381...

airbasix (>=0.2.0, <=0.3.0) potentially affected by unknown CVE via wix-data (0.0.1-security)

wix-data NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wix-data and may be impacted: - airbasix =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39367...

fox (>=1.1.0, <=1.6.2), prova (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via simple.io (2.0.0)

simple.io NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on simple.io and may be impacted: - fox =1.1.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33280...

sr-npm (1.7.308) potentially affected by unknown CVE via wix-secrets-backend (0.0.1-security)

wix-secrets-backend NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wix-secrets-backend and may be impacted: - sr-npm 1.7.308 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39369...

ourtunes (>=0.0.0, <=1.1.0), play-url (>=0.0.2, <=0.0.5) potentially affected by unknown CVE via soundcloud-stream (0.0.2)

soundcloud-stream NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on soundcloud-stream and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33673...

taky-cache-loop (0.0.1), taky-redis-throttle (0.0.1) potentially affected by unknown CVE via every-time (0.0.0)

every-time NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on every-time and may be impacted: - taky-cache-loop 0.0.1 - taky-redis-throttle 0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19990...

attr (>=0.0.0, <=0.0.1), door (>=0.0.5, <=0.0.6) +6 more potentially affected by unknown CVE via new-pubsub (>=0.0.3, <=2.0.0)

new-pubsub NPM version =0.0.3, =0.0.0, =0.0.5, =0.0.7, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - watch-array 0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27366...

rhys19-verbatim (2.0.2) potentially affected by unknown CVE via elctron (0.0.1-security)

elctron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on elctron and may be impacted: - rhys19-verbatim 2.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19315...

ahmedraza-atm (>=2.0.0, <=2.0.3), cli-03-todo-list (1.0.0) +3 more potentially affected by unknown CVE via chlak (0.0.1-security)

chlak NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chlak and may be impacted: - ahmedraza-atm =2.0.0, =1.0.0, =1.0.0, =1.0.1 - todo-list-with-anila-waqar 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16991...

@etherio/database (>=0.0.1, <=0.0.13), @gridnt/ngplus (1.0.3) +23 more potentially affected by unknown CVE via axois (0.0.1-security)

axois NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axois and may be impacted: - @etherio/database =0.0.1, =0.5.6, =3.10.2-alpha.0, =0.0.27, =0.0.27, =1.0.0, =1.0.2, =0.1.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE...

@simplyjoe/private-package (1.0.1), antra567 (1.0.0) +1 more potentially affected by unknown CVE via lodashh (0.0.1-security)

lodashh NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodashh and may be impacted: - @simplyjoe/private-package 1.0.1 - antra567 1.0.0 - cfn-resolver-lib =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory:...

dm-ide (>=0.0.1, <=1.2.8) potentially affected by unknown CVE via electrin (0.0.1-security)

electrin NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on electrin and may be impacted: - dm-ide =0.0.1, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19424...

brick-node (>=0.0.13, <=0.0.17), bud-live-server (>=0.0.0, <=0.0.5) +9 more potentially affected by unknown CVE via set-content-type (>=0.0.0, <=0.0.3)

set-content-type NPM version =0.0.0, =0.0.13, =0.0.0, =0.0.0, =0.0.0, =2.0.4, =3.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33016...

vce-terminal (>=1.2.4, <=1.2.8) potentially affected by unknown CVE via eletron (0.0.1-security)

eletron NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eletron and may be impacted: - vce-terminal =1.2.4, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19514...