brick (=0.0.0), brick-node (>=0.0.8 <=0.0.17) +29 more potentially affected by unknown CVE via show-version (>=0.0.0 <=2.0.0)

show-version NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-33163...

@mattdesl/quick-stub (>=1.0.0 <=3.0.1), brick (=0.0.0) +15 more potentially affected by unknown CVE via variable-name (>=0.0.1 <=0.0.2)

variable-name NPM version =0.0.1, =1.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =1.0.0, =0.0.0, =1.2.0, =7.0.0, =1.0.0, =0.0.0, =1.1.1, =1.0.0, =1.9.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-38145...

devel_core (>=0.0.1 <=0.0.8) potentially affected by unknown CVE via requets (=0.0.1-security)

requets NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requets and may be impacted: - develcore =0.0.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32115...

ftms (=1.0.0), package-ftms (=1.0.0) potentially affected by unknown CVE via requset (=0.0.1-security)

requset NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requset and may be impacted: - ftms =1.0.0 - package-ftms =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32120...

rs265_text-based-adventure-game (>=1.0.4 <=1.0.6) potentially affected by unknown CVE via halk (=0.0.1-security)

halk NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on halk and may be impacted: - rs265text-based-adventure-game =1.0.4, =1.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22133...

bud-babelify (>=0.0.1 <=1.0.0) potentially affected by unknown CVE via bud-browserify (>=0.4.4 <=2.0.0)

bud-browserify NPM version =0.4.4, =0.0.1, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16253...

04-rsib_contact-numbers-menue_cli (>=1.0.0 <=1.0.1), advanture-game-by-sam (>=1.0.0 <=1.0.1) +2 more potentially affected by unknown CVE via chak (=0.0.1-security)

chak NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chak and may be impacted: - 04-rsibcontact-numbers-menuecli =1.0.0, =1.0.0, =1.0.1, =1.0.3 - text-base-adventure-92 =1.0.0 Source cves: unknown CVE Source advisory:...

@biuauth/modal (>=6.1.2 <=6.2.1), @biuauth/ui (>=6.2.0 <=6.2.11) +6 more potentially affected by unknown CVE via reat (=0.0.1-security)

reat NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reat and may be impacted: - @biuauth/modal =6.1.2, =6.2.0, =6.1.23, =1.0.0, =2.0.8, =1.1.1, =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31896...

1yoouoo (>=0.0.5 <=0.1.2), bluebottle-magento-marketplace (>=1.1.2 <=1.2.5) +6 more potentially affected by unknown CVE via module-name (=0.0.1-security)

module-name NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on module-name and may be impacted: - 1yoouoo =0.0.5, =1.1.2, =0.0.2, =1.0.1, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26605...

03_node_1 (=1.0.0), 111nodejs03 (=1.0.0) +96 more potentially affected by unknown CVE via math (=0.0.3)

math NPM version =0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on math and may be impacted: - 03node1 =1.0.0 - 111nodejs03 =1.0.0 - @daostack/arc =0.0.1-rc.21, =0.0.1-rc.41-v2, =1.0.1, =1.0.0, =2.0.11, =0.8.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0,...

assume (>=0.0.10 <=1.4.0), atomify (>=7.1.0 <=7.3.1) +18 more potentially affected by unknown CVE via prettify-error (=0.1.1)

prettify-error NPM version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on prettify-error and may be impacted: - assume =0.0.10, =7.1.0, =1.0.0, =1.0.0, =0.0.1, =0.0.10, =1.16.0, =3.0.0 and more Source cves: unknown CVE Source advisory:...

snsadmin (=1.0.0) potentially affected by unknown CVE via soket.io (=0.0.1-security)

soket.io NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on soket.io and may be impacted: - snsadmin =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33611...

vce-terminal (>=1.2.4 <=1.2.8) potentially affected by unknown CVE via eletron (=0.0.1-security)

eletron NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eletron and may be impacted: - vce-terminal =1.2.4, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19514...

ourtunes (>=0.0.0 <=1.1.0), play-url (>=0.0.2 <=0.0.5) potentially affected by unknown CVE via rdio-js-api (=0.0.6)

rdio-js-api NPM version =0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on rdio-js-api and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31754...

mycoin (=1.0.0), simple-blockchain-implement (>=1.0.0 <=1.0.4) potentially affected by unknown CVE via crytpo-js (=0.0.1-security)

crytpo-js NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin =1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17770...

fox (>=0.0.7 <=0.0.8), one (>=1.7.0 <=2.5.2) +2 more potentially affected by unknown CVE via boxcars (>=0.0.6 <=2.0.0)

boxcars NPM version =0.0.6, =0.0.7, =1.7.0, =0.0.1, =0.3.1, =0.6.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16042...

@quailjs/quail-core (>=0.0.17 <=0.0.21), assume (>=0.0.10 <=1.4.0) +62 more potentially affected by unknown CVE via format-text (>=0.0.3 <=2.0.0)

format-text NPM version =0.0.3, =0.0.17, =0.0.10, =7.1.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =0.0.0, =2.3.0 - codemirror-console-ui =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-20789...

eksi-server (>=0.0.7 <=0.0.8) potentially affected by unknown CVE via json-resources (=0.0.1)

json-resources NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on json-resources and may be impacted: - eksi-server =0.0.7, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23956...

watch-array (>=0.0.0 <=0.0.4) potentially affected by unknown CVE via new-list (>=0.0.5 <=2.0.0)

new-list NPM version =0.0.5, =0.0.0, =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27362...

brick (=0.0.0), fox (>=0.0.9 <=1.6.2) +2 more potentially affected by unknown CVE via core-modules (=0.0.0)

core-modules NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on core-modules and may be impacted: - brick =0.0.0 - fox =0.0.9, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17577...

sutter-rdd-authentication (>=0.1.0 <=0.2.1) potentially affected by unknown CVE via sutter-rdd-services (=0.0.1-security)

sutter-rdd-services NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on sutter-rdd-services and may be impacted: - sutter-rdd-authentication =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34247...

h1-cli-device-browser (>=1.0.1-alpha.0 <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0 <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-iam-project-select (=1.0.1-alpha.1)

h1-cli-ext-iam-project-select NPM version =1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-iam-project-select and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE...

h1-cli-device-browser (>=1.0.1-alpha.0 <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0 <=1.0.1-alpha.1) +2 more potentially affected by unknown CVE via h1-cli-core (=1.0.1-alpha.1)

h1-cli-core NPM version =1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-core and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Sour...

eksi-server (>=0.0.0 <=0.0.8), eksi-sozluk (>=0.0.0 <=0.0.13) +2 more potentially affected by unknown CVE via new-range (=0.0.0)

new-range NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-range and may be impacted: - eksi-server =0.0.0, =0.0.0, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27367...

brick-node (>=0.0.13 <=0.0.17), bud-live-server (>=0.0.0 <=0.0.5) +9 more potentially affected by unknown CVE via set-content-type (>=0.0.0 <=0.0.3)

set-content-type NPM version =0.0.0, =0.0.13, =0.0.0, =0.0.0, =0.0.0, =2.0.4, =3.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33016...

@pirxpilot/confirmation (=1.0.1), @pirxpilot/dialog (=1.1.1) +46 more potentially affected by unknown CVE via macgyver (>=1.10.1 <=1.9.2)

macgyver NPM version =1.10.1, =1.1.0, =1.0.3, =2.0.0, =1.0.1, =1.0.0, =1.0.8 - democracyos-confirmation =0.0.5 - democracyos-popover =1.1.0 - democracyos-quill =0.19.12 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25744...

gezi-core (>=0.0.0 <=0.0.2) potentially affected by unknown CVE via unique-now (=0.0.1)

unique-now NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on unique-now and may be impacted: - gezi-core =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37825...

memoize-with-leveldb (>=0.0.0 <=0.0.1), radio-paradise-api (>=0.0.0 <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0 <=2.0.0)

level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25200...

gezi-core (>=0.0.0 <=0.0.2), less-common-words (=0.0.0) +1 more potentially affected by unknown CVE via most-common-words (=2.0.0)

most-common-words NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on most-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - less-common-words =0.0.0 - meta-tags =0.0.0 Source cves: unknown CVE Source advisory:...

brick-node (>=0.0.0 <=0.0.17), tinkr-cli (>=0.0.1 <=0.0.9) potentially affected by unknown CVE via ignore-doc (>=0.0.0 <=0.0.1)

ignore-doc NPM version =0.0.0, =0.0.0, =0.0.1, =0.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23012...

fstlncomponent (>=1.0.1 <=1.0.7) potentially affected by unknown CVE via plugin-sass (=0.0.1-security)

plugin-sass NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-sass and may be impacted: - fstlncomponent =1.0.1, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29416...

change-object (=0.0.0) potentially affected by unknown CVE via change-object-path (=0.0.1)

change-object-path NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on change-object-path and may be impacted: - change-object =0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16781...

ourtunes (>=0.0.0 <=1.1.0), play-url (>=0.0.2 <=0.0.5) potentially affected by unknown CVE via soundcloud-stream (=0.0.2)

soundcloud-stream NPM version =0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on soundcloud-stream and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33673...

use-rtg (>=1.0.1 <=1.0.3) potentially affected by unknown CVE via observed-bits (=0.3.1)

observed-bits NPM version =0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on observed-bits and may be impacted: - use-rtg =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28060...

brick (=0.0.0), brick-node (>=0.0.0 <=0.0.17) +34 more potentially affected by unknown CVE via local-debug (>=0.0.0 <=2.0.0)

local-debug NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.7, =0.0.0, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25478...

brick (=0.0.0), bud (>=0.0.0 <=0.1.2) +16 more potentially affected by unknown CVE via first-val (=0.0.0)

first-val NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on first-val and may be impacted: - brick =0.0.0 - bud =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =0.0.0, =3.1.1, =0.0.0, =0.0.4, =0.0.0, =0.0.2 and more Source cves...

brick-node (>=0.0.0 <=0.0.17), change-object (=0.0.0) +9 more potentially affected by unknown CVE via flat-glob (=0.0.1)

flat-glob NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flat-glob and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20688...

alert (>=0.0.0 <=0.0.1), audio-play (=1.0.0) +13 more potentially affected by unknown CVE via new-chain (>=0.0.0 <=2.0.0)

new-chain NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.1, =0.0.0, =0.0.9, =0.0.0, =3.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27356...

change-object (=0.0.0), cli-qa (=2.0.0) +7 more potentially affected by unknown CVE via run-serially (=0.0.0)

run-serially NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on run-serially and may be impacted: - change-object =0.0.0 - cli-qa =2.0.0 - comma-list =0.0.0 - fd-select =1.0.0 - frp-tick =1.0.0 - innkeeper =1.0.4 - limited-parallel-loop...

@rustybrooks/eslint-config-prettier (>=1.0.0 <=1.0.18) potentially affected by unknown CVE via eslint-plugin-airbnb-base (=0.0.1-security)

eslint-plugin-airbnb-base NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eslint-plugin-airbnb-base and may be impacted: - @rustybrooks/eslint-config-prettier =1.0.0, =1.0.18 Source cves: unknown CVE Source advisory:...

@aviationpast/niotest (>=1.0.1 <=1.0.16) potentially affected by unknown CVE via @aviationpast/niotest (=1.0.17)

@aviationpast/niotest NPM version =1.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on @aviationpast/niotest and may be impacted: - @aviationpast/niotest =1.0.1, =1.0.16 Source cves: unknown CVE Source advisory: OSV:MAL-2025-7098...

@goodboydigital/fido-build (>=3.0.0 <=13.2.0), @olympeio-extensions/sustain (>=2.11.5 <=2.14.0) +15 more potentially affected by unknown CVE via bable-loader (=0.0.1-security)

bable-loader NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bable-loader and may be impacted: - @goodboydigital/fido-build =3.0.0, =2.11.5, =0.0.6-dev, =0.0.2, =0.0.2, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1...

kik (>=0.0.0 <=1.3.0) potentially affected by unknown CVE via cli-form (=0.1.4)

cli-form NPM version =0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...

domquery (>=1.0.0 <=1.0.1), hide (=0.0.0) +3 more potentially affected by unknown CVE via style-dom (>=0.0.0 <=2.0.0)

style-dom NPM version =0.0.0, =1.0.0, =0.0.0, =0.0.2, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34114...

my-testutil (=1.0.1), storm-test (=0.0.1) +1 more potentially affected by unknown CVE via wepack-cli (=0.0.1-security)

wepack-cli NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wepack-cli and may be impacted: - my-testutil =1.0.1 - storm-test =0.0.1 - stormydb =0.1.1, =0.5.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39082...

fox (=0.0.8), lowkick (>=0.0.1 <=0.1.0) +2 more potentially affected by unknown CVE via combiner (=1.2.1)

combiner NPM version =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on combiner and may be impacted: - fox =0.0.8 - lowkick =0.0.1, =1.1.0, =0.3.1, =0.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17379...

simple-basic-react-button (=0.1.0) potentially affected by unknown CVE via prpo-types (=0.0.1-security)

prpo-types NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prpo-types and may be impacted: - simple-basic-react-button =0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30788...

brick-browser (>=0.0.0 <=0.0.14), brick-node (>=0.0.0 <=0.0.17) +13 more potentially affected by unknown CVE via mix-objects (>=0.0.2 <=0.0.3)

mix-objects NPM version =0.0.2, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =2.0.0, =0.0.4-1.1, =4.5.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26507...

airbasix (>=0.2.0 <=0.3.0) potentially affected by unknown CVE via wix-data (=0.0.1-security)

wix-data NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wix-data and may be impacted: - airbasix =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39367...

gulp-jsify (=0.1.0) potentially affected by unknown CVE via jsify (=0.0.4)

jsify NPM version =0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on jsify and may be impacted: - gulp-jsify =0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23947...