dexter-angular-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship.

Quart is an A Python ASGI web microframework with the same API as Flask

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in formparser.MultiPartParser(). An attacker can cause the parser to consume more memory than the upload size, in excess of max_form_memory_size, by sending malicious data in a non-file field of a multipart/form-data request.

org.webjars.npm:dataloader is an A data loading utility to reduce requests to a backend via batching and caching.

Affected versions of this package are vulnerable to Denial of Service (DoS) via the batching process, when multiple queries can be sent within a single request. An attacker can submit a request containing thousands of aliases in one query.