dm-ide (>=0.0.1 <=1.2.8) potentially affected by unknown CVE via electrin (=0.0.1-security)

electrin NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on electrin and may be impacted: - dm-ide =0.0.1, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19424...

@mattdesl/quick-stub (>=1.0.0 <=3.0.1), brick (=0.0.0) +15 more potentially affected by unknown CVE via variable-name (>=0.0.1 <=0.0.2)

variable-name NPM version =0.0.1, =1.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =1.0.0, =0.0.0, =1.2.0, =7.0.0, =1.0.0, =0.0.0, =1.1.1, =1.0.0, =1.9.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-38145...

@itutoring/itutoring_application_js_api (>=1.3.3 <=1.20.7), html-to-unicode (>=1.0.0 <=1.0.2) +2 more potentially affected by unknown CVE via reacct (=0.0.1-security)

reacct NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reacct and may be impacted: - @itutoring/itutoringapplicationjsapi =1.3.3, =1.0.0, =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31760...

@etherio/database (>=0.0.1 <=0.0.13), @gridnt/ngplus (=1.0.3) +23 more potentially affected by unknown CVE via axois (=0.0.1-security)

axois NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axois and may be impacted: - @etherio/database =0.0.1, =0.5.6, =3.10.2, =0.0.27, =0.0.27, =1.0.0, =1.0.2, =0.1.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE Source...

20210816-test (>=1.0.0 <=1.0.2) potentially affected by unknown CVE via lodah (=0.0.1-security)

lodah NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodah and may be impacted: - 20210816-test =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25501...

srb2kartjs (>=2.2.7 <=2.2.9) potentially affected by unknown CVE via ldoash (=0.0.1-security)

ldoash NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldoash and may be impacted: - srb2kartjs =2.2.7, =2.2.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25007...

custom_ww (=1.0.0) potentially affected by unknown CVE via lodasn (=0.0.1-security)

lodasn NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodasn and may be impacted: - customww =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25510...

formii (=1.0.0), html-patcher-stream (>=1.0.0 <=1.1.0) +1 more potentially affected by unknown CVE via html-patcher (>=0.0.3 <=0.1.0)

html-patcher NPM version =0.0.3, =1.0.0, =0.1.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22751...

change-object (=0.0.0), cli-qa (=2.0.0) +7 more potentially affected by unknown CVE via filter-stack (=0.0.0)

filter-stack NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on filter-stack and may be impacted: - change-object =0.0.0 - cli-qa =2.0.0 - comma-list =0.0.0 - fd-select =1.0.0 - frp-tick =1.0.0 - innkeeper =1.0.4 - limited-parallel-loop...

dxtest1 (>=1.0.0 <=1.0.2), lewistest (>=1.0.0 <=1.0.1) +2 more potentially affected by unknown CVE via commender (=0.0.1-security)

commender NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commender and may be impacted: - dxtest1 =1.0.0, =1.0.0, =1.0.1 - xy-xueyong-rkc =1.0.0 - zansanfeng123 =1.0.0 Source cves: unknown CVE Source advisory:...

deletenewf (=1.0.0), itheima-tool-time (=1.0.0) +1 more potentially affected by unknown CVE via jquey (=0.0.1-security)

jquey NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jquey and may be impacted: - deletenewf =1.0.0 - itheima-tool-time =1.0.0 - untitledfedorsh =1.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23906...

000tea (=1.4.5), 00tea (=1.4.4) +838 more potentially affected by unknown CVE via name (=0.0.2)

name NPM version =0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on name and may be impacted: - 000tea =1.4.5 - 00tea =1.4.4 - 01q =1.5.1 - 032we =1.5.7 - 0tea =1.4.3 - 123qaz =1.1.1 - 12we =1.6.9 - 12wea =1.5.5 - 1qwe =1.4.6 - 1qwer =1.4.7 - 1qwer...

ftms (=1.0.0), package-ftms (=1.0.0) potentially affected by unknown CVE via requset (=0.0.1-security)

requset NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requset and may be impacted: - ftms =1.0.0 - package-ftms =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32120...

@kash_tt/common (>=1.0.1 <=1.1.236), @topperdev17/common (>=1.0.0 <=2.0.1) +6 more potentially affected by unknown CVE via typecript (=0.0.1-security)

typecript NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on typecript and may be impacted: - @kashtt/common =1.0.1, =1.0.0, =1.0.3, =1.0.53, =0.0.1, =1.0.5, =1.0.14 - tant-intl-new =1.0.14 Source cves: unknown CVE Source...

brick (=0.0.0), brick-node (>=0.0.8 <=0.0.17) +20 more potentially affected by unknown CVE via default-debug (>=0.0.0 <=2.0.0)

default-debug NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-18178...

my-first-vue-project (=0.1.0), react-responsive-data-table (>=1.0.0 <=1.0.5) potentially affected by unknown CVE via bootstrap4 (=0.0.1-security)

bootstrap4 NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap4 and may be impacted: - my-first-vue-project =0.1.0 - react-responsive-data-table =1.0.0, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159...

sr-npm (=1.7.308) potentially affected by unknown CVE via wix-secrets-backend (=0.0.1-security)

wix-secrets-backend NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wix-secrets-backend and may be impacted: - sr-npm =1.7.308 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39369...

23march (=1.0.0), @castyiglitchxz/alert-box-package (>=1.0.0 <=1.2.5) +30 more potentially affected by unknown CVE via node.js (=0.0.1-security)

node.js NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node.js and may be impacted: - 23march =1.0.0 - @castyiglitchxz/alert-box-package =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.1, =1.0.5, =1.0.0, =1.2.5, =1.2.1, =0.0.1, =2.2.0...

common-media (=1.0.0), common-soundcloud (>=1.0.0 <=1.1.0) +14 more potentially affected by unknown CVE via require-sdk (>=0.0.0 <=0.0.2)

require-sdk NPM version =0.0.0, =1.0.0, =1.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.4, =0.0.2, =0.0.3, =0.0.1, =0.0.1, =0.0.0, =0.1.0, =1.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-32119...

@rustybrooks/eslint-config-prettier (>=1.0.0 <=1.0.18) potentially affected by unknown CVE via eslint-plugin-airbnb-base (=0.0.1-security)

eslint-plugin-airbnb-base NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on eslint-plugin-airbnb-base and may be impacted: - @rustybrooks/eslint-config-prettier =1.0.0, =1.0.18 Source cves: unknown CVE Source advisory:...

brick-node (>=0.0.0 <=0.0.17), change-object (=0.0.0) +9 more potentially affected by unknown CVE via flat-glob (=0.0.1)

flat-glob NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flat-glob and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20688...

gulu-ui (>=0.0.6 <=0.0.7) potentially affected by unknown CVE via dev-test (=0.0.1-security)

dev-test NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on dev-test and may be impacted: - gulu-ui =0.0.6, =0.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-18345...

node-27285e17 (=1.0.0) potentially affected by unknown CVE via undesrcore (=0.0.1-security)

undesrcore NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on undesrcore and may be impacted: - node-27285e17 =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37738...

atd-browser-support (>=1.0.0 <=1.0.11), atd-deprecated-polyfills (>=0.0.3 <=1.0.8) +3 more potentially affected by unknown CVE via placeholder.js (>=2.0.1 <=3.1.0)

placeholder.js NPM version =2.0.1, =1.0.0, =0.0.3, =0.0.1, =0.0.2 - vue-placeholder.js =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29354...

gezi-core (>=0.0.0 <=0.0.2), kik-starter (>=2.1.0 <=2.2.0) potentially affected by unknown CVE via parallelly (>=0.0.1 <=0.1.0)

parallelly NPM version =0.0.1, =0.0.0, =2.1.0, =2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28866...

com.prototyper.openai-editor-tool (=0.1.3) potentially affected by unknown CVE via com.unity.nuget.newtonsoft-json (=0.0.1-security)

com.unity.nuget.newtonsoft-json NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on com.unity.nuget.newtonsoft-json and may be impacted: - com.prototyper.openai-editor-tool =0.1.3 Source cves: unknown CVE Source advisory:...

brick-browser (>=0.0.0 <=0.0.14), brick-node (>=0.0.0 <=0.0.17) +11 more potentially affected by unknown CVE via new-struct (>=0.0.4 <=0.1.1)

new-struct NPM version =0.0.4, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27369...

04-as-contact-numbers-menu-cli (=1.0.0), 10xanswers (>=1.0.11 <=1.0.36) +424 more potentially affected by unknown CVE via save-dev (=0.0.1-security)

save-dev NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on save-dev and may be impacted: - 04-as-contact-numbers-menu-cli =1.0.0 - 10xanswers =1.0.11, =3.0.2, =1.6.5, =1.9.1, =1.2.0, =1.1.6, =0.2.1, =1.0.0 - @andes/plex =8.0.1...

platzi-virtual-machine (=1.0.0) potentially affected by unknown CVE via pvm (=0.0.1-security)

pvm NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on pvm and may be impacted: - platzi-virtual-machine =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30899...

ourtunes (>=0.0.0 <=1.1.0), play-url (>=0.0.2 <=0.0.5) potentially affected by unknown CVE via soundcloud-stream (=0.0.2)

soundcloud-stream NPM version =0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on soundcloud-stream and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33673...

bud-indexhtml (>=0.0.0 <=0.0.3), indexhtml-cli (=0.0.0) +1 more potentially affected by unknown CVE via indexhtml (>=0.0.0 <=0.0.3)

indexhtml NPM version =0.0.0, =0.0.0, =0.0.2, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23115...

bud-babelify (>=0.0.1 <=1.0.0) potentially affected by unknown CVE via bud-browserify (>=0.4.4 <=2.0.0)

bud-browserify NPM version =0.4.4, =0.0.1, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16253...

@cnbritain/merlin-www-build-tools (=0.1.2), auto_cep (>=1.0.0 <=1.0.2) +5 more potentially affected by unknown CVE via browsersync (=0.0.1-security)

browsersync NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on browsersync and may be impacted: - @cnbritain/merlin-www-build-tools =0.1.2 - autocep =1.0.0, =1.0.114, =1.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Sour...

swagger-koa88 (>=1.0.2 <=1.0.5-0), windows10-electron-vibrancy (>=1.0.0 <=1.0.1) +1 more potentially affected by unknown CVE via coffe-script (=0.0.1-security)

coffe-script NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on coffe-script and may be impacted: - swagger-koa88 =1.0.2, =1.0.0, =1.0.5, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17263...

simple-basic-react-button (=0.1.0) potentially affected by unknown CVE via prpo-types (=0.0.1-security)

prpo-types NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prpo-types and may be impacted: - simple-basic-react-button =0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30788...

change-object (=0.0.0), cli-qa (=2.0.0) +7 more potentially affected by unknown CVE via run-serially (=0.0.0)

run-serially NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on run-serially and may be impacted: - change-object =0.0.0 - cli-qa =2.0.0 - comma-list =0.0.0 - fd-select =1.0.0 - frp-tick =1.0.0 - innkeeper =1.0.4 - limited-parallel-loop...

fox (>=1.5.0 <=1.6.2), pomodoro-timer (>=0.0.4 <=0.0.5) +3 more potentially affected by unknown CVE via after-time (>=0.0.0 <=0.0.1)

after-time NPM version =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1 - tomato-timer =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14147...

after-time (>=0.0.0 <=0.0.1), every-time (=0.0.0) +17 more potentially affected by unknown CVE via english-time (>=0.0.1 <=2.0.0)

english-time NPM version =0.0.1, =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1, =0.0.2, =0.0.0, =0.0.6, =0.0.0, =0.0.5 - taky-cache-loop =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-19656...

@aviationpast/niotest (>=1.0.1 <=1.0.17) potentially affected by unknown CVE via 4equest (=0.0.1-security)

4equest NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on 4equest and may be impacted: - @aviationpast/niotest =1.0.1, =1.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-7012...

bud (>=0.0.0 <=0.1.2), declarative-js (>=0.0.0 <=0.0.2) +3 more potentially affected by unknown CVE via new-partial (=0.0.1)

new-partial NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on new-partial and may be impacted: - bud =0.0.0, =0.0.0, =0.0.1, =0.0.0, =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27364...

cli-form (>=0.1.0 <=0.1.4), cli-qa (>=2.0.0 <=2.3.0) +1 more potentially affected by unknown CVE via comma-list (>=0.0.0 <=0.0.1)

comma-list NPM version =0.0.0, =0.1.0, =2.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17400...

kik (>=0.0.0 <=1.3.0), kik-starter (=2.2.0) potentially affected by unknown CVE via install-module (>=0.2.0 <=1.1.0)

install-module NPM version =0.2.0, =0.0.0, =1.3.0 - kik-starter =2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23249...

adaptive-fs (>=1.1.0 <=1.3.2), ajato (=0.0.1-wip) +1 more potentially affected by unknown CVE via mogoose (=0.0.1-security)

mogoose NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mogoose and may be impacted: - adaptive-fs =1.1.0, =1.0.48, =1.1.26 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26613...

assume (>=0.0.10 <=1.4.0), atomify (>=7.1.0 <=7.3.1) +18 more potentially affected by unknown CVE via prettify-error (=0.1.1)

prettify-error NPM version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on prettify-error and may be impacted: - assume =0.0.10, =7.1.0, =1.0.0, =1.0.0, =0.0.1, =0.0.10, =1.16.0, =3.0.0 and more Source cves: unknown CVE Source advisory:...

rhys19-verbatim (=2.0.2) potentially affected by unknown CVE via elctron (=0.0.1-security)

elctron NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on elctron and may be impacted: - rhys19-verbatim =2.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19315...

snsadmin (=1.0.0) potentially affected by unknown CVE via soket.io (=0.0.1-security)

soket.io NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on soket.io and may be impacted: - snsadmin =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33611...

domquery (>=1.0.0 <=1.0.1) potentially affected by unknown CVE via bind-key (=0.0.0)

bind-key NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on bind-key and may be impacted: - domquery =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15691...

level-json (>=0.0.4 <=1.0.0), scrape-eksi (>=0.0.0 <=0.0.1) +2 more potentially affected by unknown CVE via level-client (>=0.0.1 <=1.0.0)

level-client NPM version =0.0.1, =0.0.4, =0.0.0, =0.2.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25197...

very_good_package (>=1.0.8 <=1.0.12) potentially affected by unknown CVE via testing054dfas (=0.0.1-security)

testing054dfas NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on testing054dfas and may be impacted: - verygoodpackage =1.0.8, =1.0.12 Source cves: unknown CVE Source advisory: OSV:MAL-2025-36728...

react-calendar1 (>=0.1.0 <=1.1.4) potentially affected by unknown CVE via react-google-calendar-events (=0.0.1-security)

react-google-calendar-events NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-google-calendar-events and may be impacted: - react-calendar1 =0.1.0, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31791...