jones-mysql (=1.0.0), jones-ndb (=1.0.0) potentially affected by unknown CVE via database-jones (=1.2.8)

database-jones NPM version =1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on database-jones and may be impacted: - jones-mysql =1.0.0 - jones-ndb =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17995...

1-exceptions-handler (=1.0.13), 10-20-day-exam (=1.0.0) +2604 more potentially affected by unknown CVE via http (>=0.0.0 <=0.0.1-security)

http NPM version =0.0.0, =1.0.1, =2.0.0, =0.0.1, =0.0.3 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-22760...

react-endless (>=1.0.4 <=1.0.6), react-templet (>=1.0.0 <=1.0.3) potentially affected by unknown CVE via epress (=0.0.1-security)

epress NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epress and may be impacted: - react-endless =1.0.4, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19723...

@artemislunapatron/common (>=1.0.4 <=1.0.14), pwp-core (>=1.0.0 <=1.2.4) +1 more potentially affected by unknown CVE via exprss (=0.0.1-security)

exprss NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on exprss and may be impacted: - @artemislunapatron/common =1.0.4, =1.0.0, =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20100...

form-lab (=0.1.3), nmt_databox (>=1.0.5 <=1.0.7) potentially affected by unknown CVE via instal (=0.0.1-security)

instal NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on instal and may be impacted: - form-lab =0.1.3 - nmtdatabox =1.0.5, =1.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23246...

http-run (=0.0.1) potentially affected by unknown CVE via requet (=0.0.1-security)

requet NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requet and may be impacted: - http-run =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32114...

@luxiaodan/el-selection-tree-table (=1.0.3) potentially affected by unknown CVE via lodsah (=0.0.1-security)

lodsah NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodsah and may be impacted: - @luxiaodan/el-selection-tree-table =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25516...

@naologic/design (>=1.0.5 <=1.1.4) potentially affected by unknown CVE via iodash (=0.0.1-security)

iodash NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on iodash and may be impacted: - @naologic/design =1.0.5, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23307...

userbook (>=0.2.0 <=0.2.6) potentially affected by unknown CVE via propertify (=0.0.0)

propertify NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on propertify and may be impacted: - userbook =0.2.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30750...

failing-line (=0.0.1), mp3s (=0.0.0) +3 more potentially affected by unknown CVE via findall (=0.0.4)

findall NPM version =0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on findall and may be impacted: - failing-line =0.0.1 - mp3s =0.0.0 - ourtunes =0.0.0, =0.0.2, =0.0.3, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20572...

taky-cache-loop (=0.0.1), taky-redis-throttle (=0.0.1) potentially affected by unknown CVE via every-time (=0.0.0)

every-time NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on every-time and may be impacted: - taky-cache-loop =0.0.1 - taky-redis-throttle =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19990...

@htmlgoddess/cli (>=0.3.5 <=0.4.4), @htmlgoddess/webpack-plugin (>=0.1.0 <=0.4.4) +24 more potentially affected by unknown CVE via babel-node (=0.0.1-security)

babel-node NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-node and may be impacted: - @htmlgoddess/cli =0.3.5, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.2.0, =0.0.1, =0.0.7, =0.2.9, =0.5.2 and more Source cves: unknown CVE...

nice-elements (>=1.1.2 <=1.13.4), olaii-web-common (>=1.0.0 <=1.0.33) potentially affected by unknown CVE via angular-truncate (=0.0.1-security)

angular-truncate NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on angular-truncate and may be impacted: - nice-elements =1.1.2, =1.0.0, =1.0.33 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14532...

@c0b41/prettify-error (=1.0.0), assume (>=0.0.10 <=1.4.0) +22 more potentially affected by unknown CVE via failing-code (>=0.0.2 <=0.1.0)

failing-code NPM version =0.0.2, =0.0.10, =7.1.0, =1.0.0, =0.1.1, =1.0.0, =0.0.1, =0.0.4 - innkeeper =1.0.4 - limited-parallel-loop =0.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-20162...

brick (=0.0.0), brick-browser (>=0.0.0 <=0.0.14) +11 more potentially affected by unknown CVE via methodify (>=0.0.2 <=0.0.3)

methodify NPM version =0.0.2, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26261...

shell-jobs (>=0.1.0 <=0.1.1) potentially affected by unknown CVE via next-time (>=0.0.0 <=0.0.1)

next-time NPM version =0.0.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27399...

clicommandcources (=1.0.1) potentially affected by unknown CVE via commandr (=0.0.1-security)

commandr NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commandr and may be impacted: - clicommandcources =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17409...

ourtunes (>=0.0.0 <=1.1.0), play-url (>=0.0.2 <=0.0.5) potentially affected by unknown CVE via rdio-js-api (=0.0.6)

rdio-js-api NPM version =0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on rdio-js-api and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31754...

watch-array (>=0.0.0 <=0.0.4) potentially affected by unknown CVE via new-list (>=0.0.5 <=2.0.0)

new-list NPM version =0.0.5, =0.0.0, =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27362...

confluence-static-site-builder (>=1.0.0-m04 <=1.0.0-m08) potentially affected by unknown CVE via commnader (=0.0.1-security)

commnader NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commnader and may be impacted: - confluence-static-site-builder =1.0.0-m04, =1.0.0-m08 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17424...

mycoin (=1.0.0), simple-blockchain-implement (>=1.0.0 <=1.0.4) potentially affected by unknown CVE via crytpo-js (=0.0.1-security)

crytpo-js NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin =1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17770...

kik (>=0.2.0 <=1.3.0) potentially affected by unknown CVE via to-class-name (=0.0.0)

to-class-name NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-class-name and may be impacted: - kik =0.2.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37001...

fox (>=0.0.7 <=0.0.8), one (>=1.7.0 <=2.5.2) +2 more potentially affected by unknown CVE via boxcars (>=0.0.6 <=2.0.0)

boxcars NPM version =0.0.6, =0.0.7, =1.7.0, =0.0.1, =0.3.1, =0.6.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16042...

declarative-js (>=0.0.0 <=0.0.2) potentially affected by unknown CVE via join-params (=0.0.0)

join-params NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on join-params and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23839...

bakpiabathok-3 (=1.1.6), bonteng-1 (=1.1.6) +1 more potentially affected by unknown CVE via bonteng (=0.0.1-security)

bonteng NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bonteng and may be impacted: - bakpiabathok-3 =1.1.6 - bonteng-1 =1.1.6 - kolekcau-2 =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15953...

@quailjs/quail-core (>=0.0.17 <=0.0.21), assume (>=0.0.10 <=1.4.0) +62 more potentially affected by unknown CVE via format-text (>=0.0.3 <=2.0.0)

format-text NPM version =0.0.3, =0.0.17, =0.0.10, =7.1.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =0.0.0, =2.3.0 - codemirror-console-ui =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-20789...

brick (=0.0.0), brick-node (>=0.0.0 <=0.0.17) +18 more potentially affected by unknown CVE via uniques (>=0.0.0 <=0.0.1)

uniques NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.9, =0.0.0, =1.1.0, =2.7.12 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-37826...

@pagopa/io-react-native-wallet (>=1.2.2 <=1.5.0), @repay/eslint-config (=0.1.1) +9 more potentially affected by unknown CVE via yarn.lock (=0.0.1-security)

yarn.lock NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on yarn.lock and may be impacted: - @pagopa/io-react-native-wallet =1.2.2, =1.0.0, =2.14.0-beta.8eb3a007.e73b8c3, =4.2.0, =2.7.0, =2.0.29, =1.0.5, =0.1.0, =1.2.0, =1.2.5...

sutter-rdd-authentication (>=0.1.0 <=0.2.1) potentially affected by unknown CVE via sutter-rdd-services (=0.0.1-security)

sutter-rdd-services NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on sutter-rdd-services and may be impacted: - sutter-rdd-authentication =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34247...

h1-cli-device-node (>=1.0.1-alpha.0 <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-auth (=1.0.1-alpha.1)

h1-cli-ext-root-auth NPM version =1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-auth and may be impacted: - h1-cli-device-node =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22080...

delegate-dom (>=0.0.0 <=0.0.1), dom-delegation-stream (=0.0.0) +2 more potentially affected by unknown CVE via matches-dom-selector (=0.0.0)

matches-dom-selector NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on matches-dom-selector and may be impacted: - delegate-dom =0.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25996...

h1-cli-device-browser (>=1.0.1-alpha.0 <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0 <=1.0.1-alpha.1) +2 more potentially affected by unknown CVE via h1-cli-core (=1.0.1-alpha.1)

h1-cli-core NPM version =1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-core and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Sour...

devel_core (>=0.0.1 <=0.0.8) potentially affected by unknown CVE via requets (=0.0.1-security)

requets NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requets and may be impacted: - develcore =0.0.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32115...

1yoouoo (>=0.0.5 <=0.1.2), bluebottle-magento-marketplace (>=1.1.2 <=1.2.5) +6 more potentially affected by unknown CVE via module-name (=0.0.1-security)

module-name NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on module-name and may be impacted: - 1yoouoo =0.0.5, =1.1.2, =0.0.2, =1.0.1, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26605...

use-rtg (>=1.0.1 <=1.0.3) potentially affected by unknown CVE via observed-bits (=0.3.1)

observed-bits NPM version =0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on observed-bits and may be impacted: - use-rtg =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28060...

04-rsib_contact-numbers-menue_cli (>=1.0.0 <=1.0.1), advanture-game-by-sam (>=1.0.0 <=1.0.1) +2 more potentially affected by unknown CVE via chak (=0.0.1-security)

chak NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chak and may be impacted: - 04-rsibcontact-numbers-menuecli =1.0.0, =1.0.0, =1.0.1, =1.0.3 - text-base-adventure-92 =1.0.0 Source cves: unknown CVE Source advisory:...

on-duty-js (=3.0.0), todo-app-23426 (=1.0.0) potentially affected by unknown CVE via chalkk (=0.0.1-security)

chalkk NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chalkk and may be impacted: - on-duty-js =3.0.0 - todo-app-23426 =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16776...

attr (>=0.0.0 <=0.0.1), door (>=0.0.5 <=0.0.6) +3 more potentially affected by unknown CVE via new-prop (=2.0.0)

new-prop NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-prop and may be impacted: - attr =0.0.0, =0.0.5, =0.0.7, =0.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27365...

packagesss (=1.0.0) potentially affected by unknown CVE via ldash (=0.0.1-security)

ldash NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldash and may be impacted: - packagesss =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25004...

declarative-js (>=0.0.0 <=0.0.2) potentially affected by unknown CVE via andthen (=0.0.2)

andthen NPM version =0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on andthen and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14514...

brick-node (>=0.0.0 <=0.0.17) potentially affected by unknown CVE via categorize-files (=0.0.1)

categorize-files NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on categorize-files and may be impacted: - brick-node =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16663...

attr (>=0.0.0 <=0.0.1), door (>=0.0.5 <=0.0.6) +6 more potentially affected by unknown CVE via new-pubsub (>=0.0.3 <=2.0.0)

new-pubsub NPM version =0.0.3, =0.0.0, =0.0.5, =0.0.7, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - watch-array =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27366...

tea07-xokohero (=1.0.1) potentially affected by unknown CVE via api-chatfb-test (=0.0.1-security)

api-chatfb-test NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on api-chatfb-test and may be impacted: - tea07-xokohero =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14640...

brick-node (>=0.0.8 <=0.0.17), bud (=0.0.3) +18 more potentially affected by unknown CVE via new-command (>=0.0.0 <=2.0.0)

new-command NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.3, =0.0.4, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27359...

eksi-server (>=0.0.0 <=0.0.8), eksi-sozluk (>=0.0.0 <=0.0.13) +2 more potentially affected by unknown CVE via new-range (=0.0.0)

new-range NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-range and may be impacted: - eksi-server =0.0.0, =0.0.0, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27367...

@mpticketsmodule/common (>=1.0.4 <=1.0.13), @o.yilmaz/shared (>=1.0.0 <=1.0.28) +1 more potentially affected by unknown CVE via epxress (=0.0.1-security)

epxress NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on epxress and may be impacted: - @mpticketsmodule/common =1.0.4, =1.0.0, =1.0.28 - @wikietickets/common =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-1972...

artery-routes-docs (>=0.0.2 <=0.0.25), arteryjs (=0.0.0) +5 more potentially affected by unknown CVE via to-slug (=0.0.0)

to-slug NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on to-slug and may be impacted: - artery-routes-docs =0.0.2, =0.2.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37002...

xiaojs-5tools (>=1.0.5 <=1.0.6) potentially affected by unknown CVE via reatc (=0.0.1-security)

reatc NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on reatc and may be impacted: - xiaojs-5tools =1.0.5, =1.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31897...

brick (=0.0.0), brick-node (>=0.0.0 <=0.0.17) potentially affected by unknown CVE via mime-of (=0.1.0)

mime-of NPM version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mime-of and may be impacted: - brick =0.0.0 - brick-node =0.0.0, =0.0.17 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26376...

@purplegate/chat-sdk (>=1.0.7 <=1.0.8), mock-json-response (=1.0.9) potentially affected by unknown CVE via rimraff (=0.0.1-security)

rimraff NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on rimraff and may be impacted: - @purplegate/chat-sdk =1.0.7, =1.0.8 - mock-json-response =1.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32235...