Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Malicious Package
Affects internallib_v157 | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects locate-path_updated | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects @jes4l/react-pkg | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects tailwindcss-animation-modern | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects react-count-sync | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects react-vite-sync | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects web3-chain-sync | Versions *
No fix available
npmPublished 5 Feb 2026
  • C
Malicious Package
Affects banquet-runtime-modules | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects @msecscc/gaia | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects dcf-commons | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects confluence-analytics-support | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects mdp-client-web | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects internationalized | Versions *
No fix available
npmPublished 4 Feb 2026
  • H
Prototype PollutionCVE-2025-61140
Affects jsonpath | Versions <1.2.0
Has fix
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects @casaverso/frontend-core | Versions *
No fix available
npmPublished 4 Feb 2026
  • M
Information Exposure
Affects promptfoo | Versions <0.119.11
Has fix
npmPublished 4 Feb 2026
  • H
Prototype PollutionCVE-2026-25521
Affects locutus | Versions >=2.0.12 <2.0.39
Has fix
npmPublished 4 Feb 2026
  • H
Credential ExposureCVE-2026-25253
Affects openclaw | Versions <2026.1.29-beta.1
Has fix
npmPublished 4 Feb 2026
  • H
Command InjectionCVE-2026-24763
Affects openclaw | Versions <2026.1.29-beta.1
Has fix
npmPublished 4 Feb 2026
  • H
Command InjectionCVE-2026-24763
Affects clawdbot | Versions *
No fix available
npmPublished 4 Feb 2026
  • H
Symlink AttackCVE-2026-24884
Affects compressing | Versions <1.10.4>=2.0.0 <2.0.1
Has fix
npmPublished 4 Feb 2026
  • M
Cross-site Request Forgery (CSRF)CVE-2026-25151
Affects @builder.io/qwik-city | Versions <1.19.0
Has fix
npmPublished 4 Feb 2026
  • M
Open RedirectCVE-2026-25149
Affects @builder.io/qwik-city | Versions <1.19.0
Has fix
npmPublished 4 Feb 2026
  • M
Cross-site Scripting (XSS)CVE-2026-25148
Affects @builder.io/qwik | Versions <1.19.0
Has fix
npmPublished 4 Feb 2026
  • C
Prototype PollutionCVE-2026-25150
Affects @builder.io/qwik-city | Versions <1.19.0
Has fix
npmPublished 4 Feb 2026
  • H
Arbitrary Code InjectionCVE-2026-24887
Affects @anthropic-ai/claude-code | Versions <2.0.72
Has fix
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects docusaurus-plugin-launchdarkly | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects ggajsvjsg | Versions *
No fix available
npmPublished 4 Feb 2026
  • C
Malicious Package
Affects remark-gfm-v4 | Versions *
No fix available
npmPublished 4 Feb 2026
  • H
Directory TraversalCVE-2026-24053
Affects @anthropic-ai/claude-code | Versions <2.0.74
Has fix
npmPublished 4 Feb 2026