assume (>=0.0.10 <=1.4.0), atomify (>=7.1.0 <=7.3.1) +32 more potentially affected by unknown CVE via style-format (>=0.0.0 <=2.0.0)

style-format NPM version =0.0.0, =0.0.10, =7.1.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =0.0.0, =0.0.2 - fd-select =1.0.0 - frp-tick =1.0.0 - generator-freekerneljs =0.6.0 - hearing-aid =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-34115...

@tgticketing/common (>=1.0.2 <=1.0.25), pirvp (=1.0.0) potentially affected by unknown CVE via exrpess (=0.0.1-security)

exrpess NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on exrpess and may be impacted: - @tgticketing/common =1.0.2, =1.0.25 - pirvp =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20101...

change-object (=0.0.0) potentially affected by unknown CVE via change-object-path (=0.0.1)

change-object-path NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on change-object-path and may be impacted: - change-object =0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16781...

vce-terminal (>=1.2.4 <=1.2.8) potentially affected by unknown CVE via eletron (=0.0.1-security)

eletron NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eletron and may be impacted: - vce-terminal =1.2.4, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19514...

alert (>=0.0.0 <=0.0.1), background-image (=0.0.0) +40 more potentially affected by unknown CVE via new-format (>=0.0.1 <=2.0.0)

new-format NPM version =0.0.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.3.0, =0.0.0, =0.0.10, =0.0.0, =0.0.0, =0.0.0, =0.0.13 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27361...

08cms (=1.0.0), 1.1.0 (=1.0.0) +8988 more potentially affected by unknown CVE via orchestrator (>=0.0.5 <=0.3.8)

orchestrator NPM version =0.0.5, =1.0.0, =1.0.0, =0.0.2, =1.0.0, =0.0.1, =1.0.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-28475...

fox (=0.0.8), lowkick (>=0.0.1 <=0.1.0) +2 more potentially affected by unknown CVE via combiner (=1.2.1)

combiner NPM version =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on combiner and may be impacted: - fox =0.0.8 - lowkick =0.0.1, =1.1.0, =0.3.1, =0.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17379...

@pirxpilot/confirmation (=1.0.1), @pirxpilot/dialog (=1.1.1) +46 more potentially affected by unknown CVE via macgyver (>=1.10.1 <=1.9.2)

macgyver NPM version =1.10.1, =1.1.0, =1.0.3, =2.0.0, =1.0.1, =1.0.0, =1.0.8 - democracyos-confirmation =0.0.5 - democracyos-popover =1.1.0 - democracyos-quill =0.19.12 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25744...

brick-node (>=0.0.0 <=0.0.17), tinkr-cli (>=0.0.1 <=0.0.9) potentially affected by unknown CVE via ignore-doc (>=0.0.0 <=0.0.1)

ignore-doc NPM version =0.0.0, =0.0.0, =0.0.1, =0.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23012...

@wcd/gqio.angular-element-starter-kit (=0.1.0), @wcd/gqio.angular-element-todo (=0.1.0) +1 more potentially affected by unknown CVE via platform-browser (=0.0.1-security)

platform-browser NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser and may be impacted: - @wcd/gqio.angular-element-starter-kit =0.1.0 - @wcd/gqio.angular-element-todo =0.1.0 - clinicaamandao =1.0.0 Source cve...

brick (=0.0.0), duo-parse (=0.4.0) +4 more potentially affected by unknown CVE via memoize-sync (>=0.0.2 <=2.0.0)

memoize-sync NPM version =0.0.2, =0.0.9, =5.0.0, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26179...

brick (=0.0.0), brick-node (>=0.0.8 <=0.0.17) +30 more potentially affected by unknown CVE via show-help (>=0.0.0 <=2.0.1)

show-help NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =1.1.0, =1.1.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33162...

@alu0101350158/constant-folding (>=1.0.0 <=1.3.9), @mp-next/build (>=0.0.1-alpha.27 <=0.0.1-alpha.34) +9 more potentially affected by unknown CVE via commmander (=0.0.1-security)

commmander NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commmander and may be impacted: - @alu0101350158/constant-folding =1.0.0, =0.0.1-alpha.27, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - zhoukang-cli =1.0.0 Sourc...

evy-fanyi (>=0.0.1 <=0.0.2), starry_icon_tool (=1.0.0) potentially affected by unknown CVE via langdet (=0.0.1-security)

langdet NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on langdet and may be impacted: - evy-fanyi =0.0.1, =0.0.2 - starryicontool =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24945...

big-integer-max (=1.0.0), big-integer-min (>=1.0.0 <=1.0.1) +25 more potentially affected by unknown CVE via just-next-tick (=0.0.0)

just-next-tick NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-next-tick and may be impacted: - big-integer-max =1.0.0 - big-integer-min =1.0.0, =0.0.3, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.9 and more Source cves: unknown CVE...

docusign-jsx (=1.0.0), word-replace-contabil (>=1.0.1 <=1.0.9) potentially affected by unknown CVE via word2pdf (=0.0.1-security)

word2pdf NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on word2pdf and may be impacted: - docusign-jsx =1.0.0 - word-replace-contabil =1.0.1, =1.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39417...

@deck/app (>=1.0.1 <=1.4.11), octophant (=0.1.0) potentially affected by unknown CVE via rimraf-glob (=0.0.0)

rimraf-glob NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on rimraf-glob and may be impacted: - @deck/app =1.0.1, =1.4.11 - octophant =0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32233...

luis-reddit-cli (=1.0.0), md-links-larissadepaula (>=0.2.0 <=0.2.1) +1 more potentially affected by unknown CVE via node-fecth (=0.0.1-security)

node-fecth NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node-fecth and may be impacted: - luis-reddit-cli =1.0.0 - md-links-larissadepaula =0.2.0, =0.0.37, =0.0.40 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27...

brick (=0.0.0), brick-node (>=0.0.0 <=0.0.17) +34 more potentially affected by unknown CVE via local-debug (>=0.0.0 <=2.0.0)

local-debug NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.7, =0.0.0, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25478...

rs265_text-based-adventure-game (>=1.0.4 <=1.0.6) potentially affected by unknown CVE via halk (=0.0.1-security)

halk NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on halk and may be impacted: - rs265text-based-adventure-game =1.0.4, =1.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22133...

alert (>=0.0.0 <=0.0.1), audio-play (=1.0.0) +13 more potentially affected by unknown CVE via new-chain (>=0.0.0 <=2.0.0)

new-chain NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.1, =0.0.0, =0.0.9, =0.0.0, =3.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27356...

jl-wechat-sdk (>=1.0.0 <=1.2.3) potentially affected by unknown CVE via crpyto-js (=0.0.1-security)

crpyto-js NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crpyto-js and may be impacted: - jl-wechat-sdk =1.0.0, =1.2.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17718...

brick (=0.0.0), bud (>=0.0.0 <=0.1.2) +16 more potentially affected by unknown CVE via first-val (=0.0.0)

first-val NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on first-val and may be impacted: - brick =0.0.0 - bud =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =0.0.0, =3.1.1, =0.0.0, =0.0.4, =0.0.0, =0.0.2 and more Source cves...

@aviationpast/niotest (>=1.0.1 <=1.0.16) potentially affected by unknown CVE via @aviationpast/niotest (=1.0.17)

@aviationpast/niotest NPM version =1.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on @aviationpast/niotest and may be impacted: - @aviationpast/niotest =1.0.1, =1.0.16 Source cves: unknown CVE Source advisory: OSV:MAL-2025-7098...

@biuauth/modal (>=6.1.2 <=6.2.1), @biuauth/ui (>=6.2.0 <=6.2.11) +6 more potentially affected by unknown CVE via reat (=0.0.1-security)

reat NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reat and may be impacted: - @biuauth/modal =6.1.2, =6.2.0, =6.1.23, =1.0.0, =2.0.8, =1.1.1, =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31896...

my-testutil (=1.0.1), storm-test (=0.0.1) +1 more potentially affected by unknown CVE via wepack-cli (=0.0.1-security)

wepack-cli NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wepack-cli and may be impacted: - my-testutil =1.0.1 - storm-test =0.0.1 - stormydb =0.1.1, =0.5.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39082...

h1-cli-device-browser (>=1.0.1-alpha.0 <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0 <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-openapi-generator (=1.0.1-alpha.1)

h1-cli-ext-root-openapi-generator NPM version =1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-openapi-generator and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves:...

-price-checker (>=1.0.0 <=1.0.5), 003-gas-convert (=1.0.1) +18155 more potentially affected by unknown CVE via fs (>=0.0.0 <=0.0.2)

fs NPM version =0.0.0, =1.0.0, =0.0.21, =1.0.0, =0.3.96, =1.0.2 - 2.4-qr-code-project =1.0.0 - 2.typescript-init =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-21003...

bud-live-server (>=0.0.0 <=0.0.5), just-a-browserify-server (>=0.0.0 <=1.0.0) potentially affected by unknown CVE via just-a-server (>=0.0.0 <=0.0.1)

just-a-server NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24109...

ourtunes (>=0.0.0 <=1.1.0) potentially affected by unknown CVE via play-url (=0.0.5)

play-url NPM version =0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on play-url and may be impacted: - ourtunes =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29381...

containervisibleonclickbymobe (=1.0.0) potentially affected by unknown CVE via webpac (=0.0.1-security)

webpac NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on webpac and may be impacted: - containervisibleonclickbymobe =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39019...

@goodboydigital/fido-build (>=3.0.0 <=13.2.0), @olympeio-extensions/sustain (>=2.11.5 <=2.14.0) +15 more potentially affected by unknown CVE via bable-loader (=0.0.1-security)

bable-loader NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bable-loader and may be impacted: - @goodboydigital/fido-build =3.0.0, =2.11.5, =0.0.6-dev, =0.0.2, =0.0.2, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1...

domquery (>=1.0.0 <=1.0.1), hide (=0.0.0) +3 more potentially affected by unknown CVE via style-dom (>=0.0.0 <=2.0.0)

style-dom NPM version =0.0.0, =1.0.0, =0.0.0, =0.0.2, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34114...

brick-node (>=0.0.13 <=0.0.17), bud-live-server (>=0.0.0 <=0.0.5) +9 more potentially affected by unknown CVE via set-content-type (>=0.0.0 <=0.0.3)

set-content-type NPM version =0.0.0, =0.0.13, =0.0.0, =0.0.0, =0.0.0, =2.0.4, =3.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33016...

one (>=1.1.2 <=1.8.2), plv8x (>=0.3.1 <=0.3.2) potentially affected by unknown CVE via genpkg (=0.0.3)

genpkg NPM version =0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on genpkg and may be impacted: - one =1.1.2, =0.3.1, =0.3.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-21327...

@baosight/xinrong (>=0.0.36 <=0.0.37), wypulldom (=1.0.0) potentially affected by unknown CVE via jqeury (=0.0.1-security)

jqeury NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jqeury and may be impacted: - @baosight/xinrong =0.0.36, =0.0.37 - wypulldom =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23891...

brick-node (>=0.0.0 <=0.0.17), change-object (=0.0.0) +8 more potentially affected by unknown CVE via stream-format (=0.0.3)

stream-format NPM version =0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on stream-format and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34079...

brick-node (>=0.0.0 <=0.0.17), change-object (=0.0.0) +9 more potentially affected by unknown CVE via pause-function (=0.0.1)

pause-function NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pause-function and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 - stream-format =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28923...

fox (>=1.1.0 <=1.6.2), prova (>=0.0.0 <=0.0.2) potentially affected by unknown CVE via simple.io (=2.0.0)

simple.io NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on simple.io and may be impacted: - fox =1.1.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33280...

dep_grap_gen (>=1.0.0 <=1.0.2) potentially affected by unknown CVE via shalk (=0.0.1-security)

shalk NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on shalk and may be impacted: - depgrapgen =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33056...

@toolspack/ttd-common (>=0.1.0 <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0 <=0.1.4) potentially affected by unknown CVE via babel-laoder (=0.0.1-security)

babel-laoder NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15281...

cli-form (>=0.0.0 <=0.1.4), cli-qa (>=0.0.0 <=2.3.0) +2 more potentially affected by unknown CVE via on-key-press (=0.0.0)

on-key-press NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on on-key-press and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28228...

memoize-with-leveldb (>=0.0.0 <=0.0.1), radio-paradise-api (>=0.0.0 <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0 <=2.0.0)

level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25200...

baluni (>=1.0.0 <=2.7.2), fast-publish (>=0.0.1 <=0.0.2-alpha.0) potentially affected by unknown CVE via chakl (=0.0.1-security)

chakl NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chakl and may be impacted: - baluni =1.0.0, =0.0.1, =0.0.2-alpha.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16766...

brick (=0.0.0), fox (>=0.0.9 <=1.6.2) +2 more potentially affected by unknown CVE via core-modules (=0.0.0)

core-modules NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on core-modules and may be impacted: - brick =0.0.0 - fox =0.0.9, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17577...

brick-node (>=0.0.0 <=0.0.3) potentially affected by unknown CVE via brick-browserify-plugin (>=0.0.0 <=0.0.1)

brick-browserify-plugin NPM version =0.0.0, =0.0.0, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16164...

@dudadev/zip-modifier-utils (=1.1.0), @newsssticketing/common (>=1.0.4 <=1.0.16) +4 more potentially affected by unknown CVE via experss (=0.0.1-security)

experss NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on experss and may be impacted: - @dudadev/zip-modifier-utils =1.1.0 - @newsssticketing/common =1.0.4, =2.0.1, =1.0.2, =1.0.6 Source cves: unknown CVE Source advisory:...

risczero-01 (=1.0.0), tea02-ddomutrr (=1.0.1) +14 more potentially affected by unknown CVE via api-chatfb (=0.0.1-security)

api-chatfb NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on api-chatfb and may be impacted: - risczero-01 =1.0.0 - tea02-ddomutrr =1.0.1 - tea03-zhangmaxq =1.0.1 - tea05-armyben66 =1.0.2 - tea06-meogak88 =1.0.1 - tea07-xokohe...

ni3ba45_marksheet (=1.0.8), zain-khan-179-simple-calculator (>=1.0.0 <=2.1.0) potentially affected by unknown CVE via cahlk (=0.0.1-security)

cahlk NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on cahlk and may be impacted: - ni3ba45marksheet =1.0.8 - zain-khan-179-simple-calculator =1.0.0, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16430...

brick (=0.0.0), brick-node (>=0.0.8 <=0.0.17) +29 more potentially affected by unknown CVE via show-version (>=0.0.0 <=2.0.0)

show-version NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33163...