Moderate 10,341 High 8,173 Critical 3,354 Low 1,496

npm 1,030 maven 965 packagist 596 pypi 519 go 327 cargo 165 rubygems 123 nuget 70 actions 8 hex 5 swift 2

vm2 10 parse-server 7 sequelize 7 aaptjs 6 nodebb 5 steal 5 safe-eval 5 flowise 5 realms-shim 4 swagger-ui 4 hermes-engine 4 safer-eval 4 mongoose 4 handlebars 3 slp-validate 3 jsrsasign 3 strapi 3 feathers-sequelize 3 xml-crypto 3 browserify-shim 3 @openzeppelin/contracts-upgradeable 3 slpjs 3 pbkdf2 2 ses 2 flatmap-stream 2 hellojs 2 ejs 2 @sequelize/core 2 shell-quote 2 mysql2 2 ghost 2 eslint-config-eslint 2 llhttp 2 electron 2 better-auth 2 dns-sync 2 @janhq/core 2 libxmljs 2 xmlhttprequest-ssl 2 parsel 2 mongodb-query-parser 2 total4 2 yeoman-genrator 2 @soketi/soketi 2 @openzeppelin/contracts 2 mathjs 2 async-git 2 url-parse 2 nadesiko3 2 libxmljs2 2 total.js 2 parse-url 2 @keystone-6/core 2 @node-saml/node-saml 2 js-data 2 locutus 2 tenvoy 2 joplin 2 dompurify 2 set-in 2 traceroute 2 @evershop/evershop 2 typeorm 2 nuxt 2 libnested 2 directus 2 giting 2 pidusage 2 bestzip 2 json-serializer 2 angular-material-sidenav-rnd 1 js-shc3 1 create-choo-electron 1 putil-merge 1 printer 1 arsenic-tabasco-cyborg-peanut-butter 1 an0n-chat-lib 1 bitcion-ops 1 aws-lambda 1 logsymbles 1 whois 1 ali-contributor 1 xmldom 1 webpack 1 @nx/node 1 launchpad 1 jquerz 1 swiper 1 memjs 1 djv 1 uglify-js 1 safe-flat 1 buffe2-xor 1 mockery 1 hsf-clients 1 sparkies 1 @dfinity/identity 1 deep-defaults 1 priest-runner 1 merge-change 1 coa 1 js-sha7 1 fast-requests 1 buffev-xor 1 ini-parser 1 ts-process-promises 1 @nestjs/devtools-integration 1 sandbox 1 bip30 1 bpi66 1 stimulsoft-dashboards-js 1 cxt 1 freediskspace 1 dset 1 dynamo-schema 1 org.webjars.npm:handlebars 1 mixin-deep 1 babel-traverse 1 adb-driver 1 keyget 1 body-parse-xml 1 push-dir 1 chak 1 curlrequest 1 Rambox 1 nats 1 agnai 1 dictum.js 1 hdeky 1 nodebatis 1 motiv.scss 1 leetlog 1 bmap 1 buffer-xoz 1 aurelia-path 1 bitcoimjs-lib 1 doc-path 1 log-symboles 1 eslint-scope 1 hs-sha3 1 changeset 1 fuffer-xor 1 set-deep-prop 1 @valtimo/components 1 gedi 1 windows-cpu 1 geoheat 1 constantinople 1 loadyaml 1 jsonata 1 prebid-universal-creative 1 pouchdb 1 eact 1 reequest 1 bufger-xor 1 npos-tesseract 1 just-extend 1 bitcionjs 1 npm-groovy-lint 1 tiar 1 dhkey 1 evil-package 1 taylored 1 jqeury 1 crpyto-js 1 valine 1 gitlog 1 bignum 1 plotter 1 md-to-pdf 1 crytpo-js 1 set-or-get 1 passport-cognito 1 js-3ha3 1 org.webjars.bowergithub.wycats:handlebars.js 1 requets 1 buvfer-xor 1 chrome-launcher 1 gitlabhook 1 foever 1 closure-compiler-stream 1 tree-kit 1 fuxa-server 1 tauri-plugin-shell 1 wifey 1 asnyc 1 bufner-xor 1 froever 1 pomelo-monitor 1 deep-extend 1 heroku-env 1 node-mpv 1 bqffer-xor 1 node-windows 1 bp66 1 buffer-xkr 1 wallet-address-vaildator 1 ruffer-xor 1 buttercms 1 soket.js 1

https://github.com/patriksimek/vm2 10 https://github.com/sequelize/sequelize 7 https://github.com/parse-community/parse-server 7 https://github.com/shenzhim/aaptjs 6 https://github.com/hacksparrow/safe-eval 5 https://github.com/NodeBB/NodeBB 5 https://github.com/stealjs/steal 5 https://github.com/swagger-api/swagger-ui 4 https://github.com/FlowiseAI/Flowise 3 https://github.com/dwisiswant0/advisory 3 https://github.com/simpleledger/slpjs 3 https://github.com/Automattic/mongoose 3 https://github.com/kjur/jsrsasign 3 https://github.com/facebook/hermes 3 https://github.com/feathersjs-ecosystem/feathers-sequelize 3 https://github.com/node-saml/xml-crypto 3 https://github.com/thlorenz/browserify-shim 3 https://github.com/strapi/strapi 3 https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable 2 https://github.com/dfinity/agent-js 2 https://github.com/keystonejs/keystone 2 https://github.com/soketi/soketi 2 https://github.com/unshiftio/url-parse 2 https://github.com/simpleledger/slp-validate.js 2 https://github.com/marudor/libxmljs2 2 https://github.com/nodejs/llhttp 2 https://github.com/MrSwitch/hello.js 2 https://github.com/ahdinosaur/set-in 2 https://github.com/better-auth/better-auth 2 https://github.com/omrilotan/async-git 2 https://github.com/totaljs/framework 2 https://github.com/josdejong/mathjs 2 https://github.com/commenthol/safer-eval 2 https://github.com/OpenZeppelin/openzeppelin-contracts 2 https://github.com/dominictarr/libnested 2 https://github.com/js-data/js-data 2 https://github.com/nuxt/nuxt 2 https://github.com/cure53/DOMPurify 2 https://github.com/HackAllSec/CVEs 2 https://github.com/browserify/pbkdf2 2 https://github.com/jaw187/node-traceroute 2 https://github.com/handlebars-lang/handlebars.js 2 https://github.com/ionicabizau/parse-url 2 https://github.com/sidorares/node-mysql2 2 https://github.com/laurent22/joplin 2 https://github.com/kujirahand/nadesiko3 2 https://github.com/node-saml/node-saml 2 https://github.com/TogaTech/tEnvoy 2 https://github.com/directus/directus 2 https://github.com/skoranga/node-dns-sync 2 https://github.com/dominictarr/event-stream 2 https://github.com/libxmljs/libxmljs 2 https://github.com/evershopcommerce/evershop 2 https://github.com/Agoric/realms-shim 2 https://github.com/hiproxy/open-browser 1 https://github.com/krzysztof-o/spritesheet.js 1 https://github.com/halfblood369/monitor 1 https://github.com/lodash/lodash 1 https://github.com/TooTallNate/plist.js 1 https://github.com/mongo-express/mongo-express 1 https://github.com/mahdaen/node-import 1 https://github.com/cabraviva/path-sanitizer 1 https://github.com/amireh/karma-mojo 1 https://github.com/naver/billboard.js 1 https://github.com/shime/find-exec 1 https://github.com/vincit/objection.js 1 https://github.com/dherault/serverless-offline 1 https://github.com/vitest-dev/vitest 1 https://github.com/jquense/expr 1 https://github.com/domharrington/node-gitlog 1 https://github.com/lobehub/lobe-chat 1 https://github.com/ali-security/mongoose 1 https://github.com/iximiuz/node-diskusage-ng 1 https://github.com/formio/enterprise-release 1 https://github.com/ioBroker/ioBroker.admin 1 https://github.com/j-holub/Node-MPV 1 https://github.com/zgec/node-js-font-converter 1 https://github.com/L33T-KR3W/push-dir 1 https://github.com/beerpwn/CVE 1 https://github.com/nrwl/nx 1 https://github.com/danheberden/deferred-exec 1 https://github.com/jessie-codes/safe-flat 1 https://github.com/node-modules/jscover 1 https://github.com/sharpred/deepHas 1 https://github.com/endojs/endo 1 https://github.com/nodef/heroku-addonpool 1 https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web 1 https://github.com/Dexus/pem 1 https://github.com/andrewjstone/dynamo-schema 1 https://github.com/mozilla/node-convict 1 https://github.com/tojocky/node-printer 1 https://github.com/FurqanSoftware/node-whois 1 https://github.com/AEB-labs/cruddl 1 https://github.com/sahellebusch/flattenizer 1 https://github.com/piranna/linux-cmdline 1 https://github.com/kyubisation/angular-server-side-configuration 1 https://github.com/Blackprint/engine-js 1 https://github.com/karma-runner/grunt-karma 1 https://github.com/Tim-Hoekstra/MailDev-2.1.0-Exploit-RCE 1 https://github.com/tailot/taylored 1 https://github.com/eclipse-theia/theia 1 https://github.com/justmoon/node-bignum 1 https://github.com/coder/code-server 1 https://github.com/korzio/djv 1 https://github.com/mongodb/js-bson 1 https://github.com/thenables/thenify 1 https://github.com/typeorm/typeorm 1 https://github.com/mjpclab/object-hierarchy-access 1 https://github.com/musabgosset/angular-material-sidenav 1 https://github.com/blitz-js/superjson 1 https://github.com/DeviceFarmer/stf 1 https://github.com/bcoin-org/bcoin 1 https://github.com/shenfw1987/angular-bmap 1 https://github.com/tomphttp/bare-server-node 1 https://github.com/eventsource/eventsource 1 https://github.com/Tencent/vConsole 1 https://github.com/wollardj/simple-plist 1 https://github.com/apostrophecms/apostrophe 1 https://github.com/siteserver/cms 1 https://github.com/Maheshkumar-Kakade/otp-generator 1 https://github.com/jonschlinkert/merge-deep 1 https://github.com/strongloop/strong-nginx-controller 1 https://github.com/balderdashy/sails 1 https://github.com/rona-dinihari/dawnsparks-node-tesseract 1 https://github.com/JSONPath-Plus/JSONPath 1 https://github.com/nuxt-modules/mdc 1 https://github.com/espadrine/localeval 1 https://github.com/jamiller619/blingjs 1 https://github.com/PeterMu/nodebatis 1 https://github.com/nuxtlabs/github-module 1 https://github.com/nvuillam/npm-groovy-lint 1 https://github.com/bencevans/screenshot-desktop 1 https://github.com/handsontable/formula-parser 1 https://github.com/jsonata-js/jsonata 1 https://github.com/MrP/image-tiler 1 https://github.com/Soontao/cycle-import-check 1 https://github.com/libp2p/js-libp2p-secio 1 https://github.com/richardgirges/express-fileupload 1 https://github.com/plotly/plotly.js 1 https://github.com/steveukx/git-js 1 https://github.com/pwnall/node-open 1 https://github.com/form-data/form-data 1 https://github.com/tschaub/gh-pages 1 https://github.com/robinvdvleuten/shvl 1 https://github.com/mantacode/safe-obj 1 https://github.com/hokaccha/node-jwt-simple 1 https://github.com/veged/coa 1 https://github.com/pugjs/constantinople 1 https://github.com/adaltas/node-mixme 1 https://github.com/luisivan/node-picotts 1 https://github.com/IonicaBizau/set-or-get.js 1 https://github.com/barneycarroll/npm-dependency-versions 1 https://github.com/fortruce/node-ps 1 https://github.com/kooinam/awesome_react_utility 1 https://github.com/manvel-khnkoyan/jpv 1 https://github.com/paypal/nemo-appium 1 https://github.com/vvo/node-whereis 1 https://github.com/kvz/locutus 1 https://github.com/Manak/npm-programmatic 1 https://github.com/CleverTap/clevertap-cordova 1 https://github.com/frenchbread/private-ip 1 https://github.com/nestjs/nest 1 https://github.com/rs/node-netmask 1 https://github.com/mde/ejs 1 https://github.com/hapijs/bassmaster 1 https://github.com/HashBrownCMS/hashbrown-cms 1 https://github.com/yuda-lyu/w-zip 1 https://github.com/cowboy/node-getobject 1 https://github.com/ronomon/opened 1 https://github.com/ericcornelissen/shescape 1 https://github.com/fex-team/kityminder 1 https://github.com/bi-a/mydatepicker 1 https://github.com/remarkjs/remark-html 1 https://github.com/tauri-apps/plugins-workspace 1 https://github.com/KyleRoss/windows-cpu 1 https://github.com/mrvautin/expressCart 1 https://github.com/hughsk/flat 1 https://github.com/ASaiAnudeep/deep-override 1 https://github.com/laverdet/isolated-vm 1 https://github.com/RIAEvangelist/node-ipc 1 https://github.com/bozuko/codify 1 https://github.com/kevva/decompress 1 https://github.com/scravy/node-macaddress 1 https://github.com/simonhaenisch/md-to-pdf 1 https://github.com/asyncapi/modelina 1 https://github.com/appium/appium-desktop 1 https://github.com/peerigon/angular-expressions 1 https://github.com/rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831 1 https://github.com/oxyno-zeta/react-editable-json-tree 1 https://github.com/neocotic/convert-svg 1 https://github.com/quaertym/compass-compile 1 https://github.com/immerjs/immer 1 https://github.com/rkesters/gnuplot 1 https://github.com/umami-software/umami 1 https://github.com/rolangom/wincred 1 https://github.com/bkimminich/juice-shop 1 https://github.com/browserify/cipher-base 1 https://github.com/webbertakken/docusaurus-plugin-content-gists 1 https://github.com/babel/babel-loader 1