@alancastro06/coolsolelog (22.14.0), albot (>=0.1.0, <=0.14.1) +43 more potentially affected by unknown CVE via ansi-codes (>=0.0.0, <=2.0.0)

ansi-codes NPM version =0.0.0, =0.1.0, =0.0.10, =7.1.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =0.0.1, =0.0.0, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-14554...

@itutoring/itutoring_application_js_api (>=1.3.3, <=1.20.7), html-to-unicode (>=1.0.0, <=1.0.2) +2 more potentially affected by unknown CVE via reacct (0.0.1-security)

reacct NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reacct and may be impacted: - @itutoring/itutoringapplicationjsapi =1.3.3, =1.0.0, =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31760...

http-run (0.0.1) potentially affected by unknown CVE via requet (0.0.1-security)

requet NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requet and may be impacted: - http-run 0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32114...

helper_project (1.3.0), twitter-buddy (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via requst (0.0.1-security)

requst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requst and may be impacted: - helperproject 1.3.0 - twitter-buddy =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32121...

cassandra-query (>=1.0.1, <=1.0.3), toobatel-bot-lib-js (1.0.0) potentially affected by unknown CVE via blubird (0.0.1-security)

blubird NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on blubird and may be impacted: - cassandra-query =1.0.1, =1.0.3 - toobatel-bot-lib-js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15874...

react-calendar1 (>=0.1.0, <=1.1.4) potentially affected by unknown CVE via react-google-calendar-events (0.0.1-security)

react-google-calendar-events NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-google-calendar-events and may be impacted: - react-calendar1 =0.1.0, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31791...

userbook (>=0.2.0, <=0.2.6) potentially affected by unknown CVE via propertify (0.0.0)

propertify NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on propertify and may be impacted: - userbook =0.2.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30750...

@aviationpast/niotest (>=1.0.1, <=1.0.17) potentially affected by unknown CVE via 4equest (0.0.1-security)

4equest NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on 4equest and may be impacted: - @aviationpast/niotest =1.0.1, =1.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-7012...

big-integer-max (1.0.0), big-integer-min (>=1.0.0, <=1.0.1) +25 more potentially affected by unknown CVE via just-next-tick (0.0.0)

just-next-tick NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-next-tick and may be impacted: - big-integer-max 1.0.0 - big-integer-min =1.0.0, =0.0.3, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.9 and more Source cves: unknown CVE Sour...

@alu0101350158/constant-folding (>=1.0.0, <=1.3.9), @mp-next/build (>=0.0.1-alpha.27, <=0.0.1-alpha.34) +10 more potentially affected by unknown CVE via commmander (0.0.1-security)

commmander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commmander and may be impacted: - @alu0101350158/constant-folding =1.0.0, =0.0.1-alpha.27, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - velzy 0.0.1 - zhoukang-cli...

after-time (>=0.0.0, <=0.0.1), every-time (0.0.0) +17 more potentially affected by unknown CVE via english-time (>=0.0.1, <=2.0.0)

english-time NPM version =0.0.1, =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1, =0.0.2, =0.0.0, =0.0.6, =0.0.0, =0.0.5 - taky-cache-loop 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-19656...

snsadmin (1.0.0) potentially affected by unknown CVE via soket.io (0.0.1-security)

soket.io NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on soket.io and may be impacted: - snsadmin 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33611...

circle (>=0.0.0, <=0.0.9), democirclepackage (1.0.3) +3 more potentially affected by unknown CVE via post-data (0.0.0)

post-data NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on post-data and may be impacted: - circle =0.0.0, =0.0.40, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29531...

airbasix (>=0.2.0, <=0.3.0) potentially affected by unknown CVE via wix-data (0.0.1-security)

wix-data NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wix-data and may be impacted: - airbasix =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39367...

confluence-static-site-builder (>=1.0.0-m04, <=1.0.0-m08) potentially affected by unknown CVE via commnader (0.0.1-security)

commnader NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commnader and may be impacted: - confluence-static-site-builder =1.0.0-m04, =1.0.0-m08 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17424...

declarative-js (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via andthen (0.0.2)

andthen NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on andthen and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14514...

eksi-server (>=0.0.7, <=0.0.8) potentially affected by unknown CVE via json-resources (0.0.1)

json-resources NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on json-resources and may be impacted: - eksi-server =0.0.7, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23956...

scraping-eksi (>=0.0.0, <=1.0.1) potentially affected by unknown CVE via limited-parallel-loop (0.0.0)

limited-parallel-loop NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on limited-parallel-loop and may be impacted: - scraping-eksi =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25373...

brick-node (>=0.0.0, <=0.0.17), tinkr-cli (>=0.0.1, <=0.0.9) potentially affected by unknown CVE via ignore-doc (>=0.0.0, <=0.0.1)

ignore-doc NPM version =0.0.0, =0.0.0, =0.0.1, =0.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23012...

attr (>=0.0.0, <=0.0.1), door (>=0.0.5, <=0.0.6) +6 more potentially affected by unknown CVE via new-pubsub (>=0.0.3, <=2.0.0)

new-pubsub NPM version =0.0.3, =0.0.0, =0.0.5, =0.0.7, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - watch-array 0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27366...

@akaiv/core (>=1.2.6, <=1.8.3), @akaiv/discord-client (>=1.0.0, <=1.4.1) +3 more potentially affected by unknown CVE via minimst (0.0.1-security)

minimst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on minimst and may be impacted: - @akaiv/core =1.2.6, =1.0.0, =0.1.0, =0.4.0 - @akaiv/kakao-client 2.0.1 - netlify-minutes 0.1.0 Source cves: unknown CVE Source advisory:...

brick (0.0.0), brick-node (>=0.0.0, <=0.0.17) potentially affected by unknown CVE via mime-of (0.1.0)

mime-of NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mime-of and may be impacted: - brick 0.0.0 - brick-node =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26376...

bud-babelify (>=0.0.1, <=1.0.0) potentially affected by unknown CVE via bud-browserify (>=0.4.4, <=2.0.0)

bud-browserify NPM version =0.4.4, =0.0.1, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16253...

@purplegate/chat-sdk (>=1.0.7, <=1.0.8), mock-json-response (1.0.9) potentially affected by unknown CVE via rimraff (0.0.1-security)

rimraff NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on rimraff and may be impacted: - @purplegate/chat-sdk =1.0.7, =1.0.8 - mock-json-response 1.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32235...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +29 more potentially affected by unknown CVE via show-version (>=0.0.0, <=2.0.0)

show-version NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33163...

gezi-core (>=0.0.0, <=0.0.2), kik-starter (>=2.1.0, <=2.2.0) potentially affected by unknown CVE via parallelly (>=0.0.1, <=0.1.0)

parallelly NPM version =0.0.1, =0.0.0, =2.1.0, =2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28866...

artery-routes-docs (>=0.0.2, <=0.0.25), arteryjs (0.0.0) +5 more potentially affected by unknown CVE via to-slug (0.0.0)

to-slug NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-slug and may be impacted: - artery-routes-docs =0.0.2, =0.2.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37002...

cli-form (>=0.1.0, <=0.1.4), cli-qa (>=2.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via comma-list (>=0.0.0, <=0.0.1)

comma-list NPM version =0.0.0, =0.1.0, =2.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17400...

shell-jobs (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via next-time (>=0.0.0, <=0.0.1)

next-time NPM version =0.0.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27399...

common-media (1.0.0), common-soundcloud (>=1.0.0, <=1.1.0) +14 more potentially affected by unknown CVE via require-sdk (>=0.0.0, <=0.0.2)

require-sdk NPM version =0.0.0, =1.0.0, =1.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.4, =0.0.2, =0.0.3, =0.0.1, =0.0.1, =0.0.0, =0.1.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-32119...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +20 more potentially affected by unknown CVE via default-debug (>=0.0.0, <=2.0.0)

default-debug NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-18178...

@quailjs/quail-core (>=0.0.17, <=0.0.21), assume (>=0.0.10, <=1.4.0) +62 more potentially affected by unknown CVE via format-text (>=0.0.3, <=2.0.0)

format-text NPM version =0.0.3, =0.0.17, =0.0.10, =7.1.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =0.0.0, =2.3.0 - codemirror-console-ui 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-20789...

clicommandcources (1.0.1) potentially affected by unknown CVE via commandr (0.0.1-security)

commandr NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commandr and may be impacted: - clicommandcources 1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17409...

brick (0.0.0), duo-parse (0.4.0) +4 more potentially affected by unknown CVE via memoize-sync (>=0.0.2, <=2.0.0)

memoize-sync NPM version =0.0.2, =0.0.9, =5.0.0, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26179...

radio-paradise-api (0.0.1), turkish-synonyms-api (0.0.0) potentially affected by unknown CVE via memoize-with-leveldb (>=0.0.1, <=2.0.0)

memoize-with-leveldb NPM version =0.0.1, =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on memoize-with-leveldb and may be impacted: - radio-paradise-api 0.0.1 - turkish-synonyms-api 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-261...

one (>=1.1.2, <=1.7.8) potentially affected by unknown CVE via highkick (1.6.2)

highkick NPM version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on highkick and may be impacted: - one =1.1.2, =1.7.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22428...

fstlncomponent (>=1.0.1, <=1.0.7) potentially affected by unknown CVE via plugin-sass (0.0.1-security)

plugin-sass NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-sass and may be impacted: - fstlncomponent =1.0.1, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29416...

change-object (0.0.0), cli-qa (2.0.0) +7 more potentially affected by unknown CVE via run-serially (0.0.0)

run-serially NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on run-serially and may be impacted: - change-object 0.0.0 - cli-qa 2.0.0 - comma-list 0.0.0 - fd-select 1.0.0 - frp-tick 1.0.0 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 ...

@pagopa/io-react-native-wallet (>=1.2.2, <=1.5.0), @repay/eslint-config (0.1.1) +9 more potentially affected by unknown CVE via yarn.lock (0.0.1-security)

yarn.lock NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on yarn.lock and may be impacted: - @pagopa/io-react-native-wallet =1.2.2, =1.0.0, =2.14.0-beta.33f459cf.046a621, =4.2.0, =2.7.0, =2.0.29, =1.0.5, =0.1.0, =1.2.0, =1.2.5...

bassant-courses-manager (>=1.0.1, <=1.0.5), dxtest1 (>=1.0.0, <=1.0.2) +3 more potentially affected by unknown CVE via commender (0.0.1-security)

commender NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commender and may be impacted: - bassant-courses-manager =1.0.1, =1.0.0, =1.0.0, =1.0.1 - xy-xueyong-rkc 1.0.0 - zansanfeng123 1.0.0 Source cves: unknown CVE Source...

simple-basic-react-button (0.1.0) potentially affected by unknown CVE via prpo-types (0.0.1-security)

prpo-types NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prpo-types and may be impacted: - simple-basic-react-button 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30788...

alert (>=0.0.0, <=0.0.1), background-image (0.0.0) +40 more potentially affected by unknown CVE via new-format (>=0.0.1, <=2.0.0)

new-format NPM version =0.0.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.3.0, =0.0.0, =0.0.10, =0.0.0, =0.0.0, =0.0.0, =0.0.13 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27361...

brick-node (>=0.0.8, <=0.0.17), bud (0.0.3) +18 more potentially affected by unknown CVE via new-command (>=0.0.0, <=2.0.0)

new-command NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.3, =0.0.4, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27359...

@naologic/design (>=1.0.5, <=1.1.4) potentially affected by unknown CVE via iodash (0.0.1-security)

iodash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on iodash and may be impacted: - @naologic/design =1.0.5, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23307...

form-lab (0.1.3), nmt_databox (>=1.0.5, <=1.0.7) potentially affected by unknown CVE via instal (0.0.1-security)

instal NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on instal and may be impacted: - form-lab 0.1.3 - nmtdatabox =1.0.5, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23246...

fd-dcc (>=1.0.0, <=2.1.4), test_sdk_aki (>=1.0.3, <=1.0.4) +1 more potentially affected by unknown CVE via axioss (0.0.1-security)

axioss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axioss and may be impacted: - fd-dcc =1.0.0, =1.0.3, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15242...

very_good_package (>=1.0.8, <=1.0.12) potentially affected by unknown CVE via testing054dfas (0.0.1-security)

testing054dfas NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on testing054dfas and may be impacted: - verygoodpackage =1.0.8, =1.0.12 Source cves: unknown CVE Source advisory: OSV:MAL-2025-36728...

node-27285e17 (1.0.0) potentially affected by unknown CVE via undesrcore (0.0.1-security)

undesrcore NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on undesrcore and may be impacted: - node-27285e17 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37738...

@mpticketsmodule/common (>=1.0.4, <=1.0.13), @o.yilmaz/shared (>=1.0.0, <=1.0.28) +1 more potentially affected by unknown CVE via epxress (0.0.1-security)

epxress NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epxress and may be impacted: - @mpticketsmodule/common =1.0.4, =1.0.0, =1.0.28 - @wikietickets/common 0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19728...

change-object (0.0.0), cli-qa (2.0.0) +7 more potentially affected by unknown CVE via filter-stack (0.0.0)

filter-stack NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on filter-stack and may be impacted: - change-object 0.0.0 - cli-qa 2.0.0 - comma-list 0.0.0 - fd-select 1.0.0 - frp-tick 1.0.0 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 ...