High 2,651 Moderate 2,316 Critical 1,306 Low 418 Medium 1

vm2 29 n8n 24 openclaw 20 parse-server 17 flowise 16 @nyariv/sandboxjs 10 fuxa-server 8 @budibase/server 8 electerm 7 sequelize 7 @oneuptime/common 6 aaptjs 6 safe-eval 5 flowise-components 5 nodebb 5 9router 5 steal 5 ghost 4 praisonai 4 locutus 4 jsrsasign 4 realms-shim 4 @paperclipai/server 4 hermes-engine 4 swagger-ui 4 mongoose 4 safer-eval 4 signalk-server 3 shell-quote 3 next-auth 3 xml-crypto 3 @vitest/browser 3 typeorm 3 convict 3 slp-validate 3 browserify-shim 3 happy-dom 3 set-in 3 electron 3 feathers-sequelize 3 fast-jwt 3 slpjs 3 handlebars 3 sillytavern 3 strapi 3 payload 2 @budibase/backend-core 2 @saltcorn/server 2 dompurify 2 libxmljs2 2 angular-expressions 2 @builder.io/qwik-city 2 mongodb-query-parser 2 pidusage 2 parsel 2 vitest 2 llhttp 2 apostrophe 2 remotion 2 next 2 ejs 2 @keystone-6/core 2 @soketi/soketi 2 @sequelize/core 2 @haxtheweb/haxcms-nodejs 2 @builder.io/qwik 2 decompress 2 parse-url 2 sm-crypto 2 deephas 2 pdf-image 2 @janhq/core 2 libnested 2 cordova-plugin-inappbrowser 2 swiper 2 libxmljs 2 xmlhttprequest-ssl 2 simple-git 2 @evershop/evershop 2 bestzip 2 joplin 2 mathjs 2 @openzeppelin/contracts 2 @lobehub/chat 2 eslint-config-eslint 2 @openzeppelin/contracts-upgradeable 2 better-auth 2 boxlite 2 @boxlite-ai/boxlite 2 jspdf 2 total4 2 parse-dashboard 2 giting 2 async-git 2 @vitejs/plugin-rsc 2 pbkdf2 2 js-data 2 traceroute 2 @clerk/nextjs 2 total.js 2 url-parse 2 @frangoteam/fuxa 2 network-ai 2 @node-saml/node-saml 2 boxlite-cli 2 github.com/boxlite-ai/boxlite/sdks/go 2 yeoman-genrator 2 json-serializer 2 dns-sync 2 protobufjs 2 @orval/core 2 directus 2 @fastify/express 2 mysql2 2 hellojs 2 ses 2 nadesiko3 2 boxlite 2 shescape 2 md-to-pdf 2 nuxt 2 pomelo-monitor 1 heroku-env 1 node-mpv 1 bqffer-xor 1 wallet-address-vaildator 1 soket.js 1 pensi-scheduler 1 js-qha3 1 expand-hash 1 rpc-websocket 1 @tanstack/solid-start 1 @nx/devkit 1 deap 1 git-diff-apply 1 modlibrary 1 objection 1 fastify-reply-from 1 kityminder 1 node-extend 1 malicious-do-not-install 1 https-proxy-agent 1 express-param 1 bitconid-rpc 1 bictore-lib 1 billboard.js 1 cruddl 1 @strapi/plugin-email 1 electorn 1 asnc 1 n8n-mcp 1 loader-utils 1 schema-inspector 1 whereis 1 buffer-xov 1 atob 1 malicious-npm-package 1 libyaml 1 river-mock 1 buffar-xor 1 localeval 1 uglyfi-js 1 @ronomon/opened 1 @tanstack/start-client-core 1 bitconi-ops 1 diamond-clien 1 image-tiler 1 npm-dependency-versions 1 predefine 1 veval 1 libubx 1 deepseek-tui 1 cryptiles 1 nis-utils 1 rc 1 js-yaml 1 coinstirng 1 node-bluetooth-serial-port 1 mogoose 1 @mikro-orm/core 1 rqeuest 1 @nfid/embed 1 @nguniversal/common 1 open 1 alico 1 node-wifi 1 gulp-tape 1 codeceptjs 1 isolated-vm 1 kraken-api 1 react-editable-json-tree 1 fs-extar 1 express-fileupload 1 workspace-tools 1 deepseek-tui-cli 1 morgan-json 1 pyramid-proportion 1 i18next-http-middleware 1 @react-router/node 1 @tanstack/vue-router-devtools 1

https://github.com/FlowiseAI/Flowise 10 https://github.com/patriksimek/vm2 10 https://github.com/parse-community/parse-server 7 https://github.com/sequelize/sequelize 7 https://github.com/shenzhim/aaptjs 6 https://github.com/stealjs/steal 5 https://github.com/hacksparrow/safe-eval 5 https://github.com/NodeBB/NodeBB 5 https://github.com/swagger-api/swagger-ui 4 https://github.com/feathersjs-ecosystem/feathers-sequelize 3 https://github.com/facebook/hermes 3 https://github.com/dwisiswant0/advisory 3 https://github.com/Automattic/mongoose 3 https://github.com/node-saml/xml-crypto 3 https://github.com/thlorenz/browserify-shim 3 https://github.com/kjur/jsrsasign 3 https://github.com/simpleledger/slpjs 3 https://github.com/strapi/strapi 3 https://github.com/capricorn86/happy-dom 3 https://github.com/typeorm/typeorm 2 https://github.com/node-saml/node-saml 2 https://github.com/commenthol/safer-eval 2 https://github.com/cure53/DOMPurify 2 https://github.com/skoranga/node-dns-sync 2 https://github.com/ahdinosaur/set-in 2 https://github.com/OpenZeppelin/openzeppelin-contracts 2 https://github.com/josdejong/mathjs 2 https://github.com/handlebars-lang/handlebars.js 2 https://github.com/omrilotan/async-git 2 https://github.com/keystonejs/keystone 2 https://github.com/MrSwitch/hello.js 2 https://github.com/dominictarr/libnested 2 https://github.com/kujirahand/nadesiko3 2 https://github.com/ionicabizau/parse-url 2 https://github.com/dfinity/agent-js 2 https://github.com/unshiftio/url-parse 2 https://github.com/totaljs/framework 2 https://github.com/jaw187/node-traceroute 2 https://github.com/soketi/soketi 2 https://github.com/HackAllSec/CVEs 2 https://github.com/sidorares/node-mysql2 2 https://github.com/laurent22/joplin 2 https://github.com/browserify/pbkdf2 2 https://github.com/libxmljs/libxmljs 2 https://github.com/directus/directus 2 https://github.com/dominictarr/event-stream 2 https://github.com/evershopcommerce/evershop 2 https://github.com/marudor/libxmljs2 2 https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable 2 https://github.com/nodejs/llhttp 2 https://github.com/js-data/js-data 2 https://github.com/Agoric/realms-shim 2 https://github.com/simpleledger/slp-validate.js 2 https://github.com/nuxt/nuxt 2 https://github.com/nfriedly/node-bestzip 1 https://github.com/facebook/nuclide 1 https://github.com/koajs/koa 1 https://bitbucket.org/xi/libyaml 1 https://github.com/auth0/passport-wsfed-saml2 1 https://github.com/arc53/DocsGPT 1 https://github.com/rosen-vladimirov/global-modules-path 1 https://github.com/jashkenas/underscore 1 https://github.com/WisdomKwan/ps-visitor 1 https://github.com/schnittstabil/merge-options 1 https://github.com/LLK/scratch-vm 1 https://github.com/builderio/qwik 1 https://github.com/haxtheweb/issues 1 https://github.com/garimpeiro-it/node-key-sender 1 https://github.com/tjmehta/101 1 https://github.com/ipfs/aegir 1 https://github.com/nextauthjs/next-auth 1 https://github.com/bi-a/mydaterangepicker 1 https://github.com/taoyuan/ntesseract 1 https://github.com/sebhildebrandt/systeminformation 1 https://github.com/jsreport/jsreport 1 https://github.com/guybedford/devcert 1 https://github.com/doowb/expand-hash 1 https://github.com/vriteio/vrite 1 https://github.com/gilbitron/Raneto 1 https://github.com/mattinsler/connie-lang 1 https://github.com/electron/electron 1 https://github.com/microsoft/typed-rest-client 1 https://github.com/selfcontained/deap 1 https://github.com/indexzero/morgan-json 1 https://github.com/ether/etherpad-lite 1 https://github.com/protobufjs/protobuf.js 1 https://github.com/pendo324/get-process-by-name-js 1 https://github.com/nolimits4web/Swiper 1 https://github.com/QwikDev/qwik 1 https://github.com/srmorete/adb-mcp 1 https://github.com/sonnyp/JSON8 1 https://github.com/valtimo-platform/valtimo-frontend-libraries 1 https://github.com/manvel-khnkoyan/jpv 1 https://github.com/vvo/node-whereis 1 https://github.com/rs/node-netmask 1 https://github.com/mde/ejs 1 https://github.com/hapijs/bassmaster 1 https://github.com/HashBrownCMS/hashbrown-cms 1 https://github.com/cowboy/node-getobject 1 https://github.com/ericcornelissen/shescape 1 https://github.com/fex-team/kityminder 1 https://github.com/tauri-apps/plugins-workspace 1 https://github.com/remarkjs/remark-html 1 https://github.com/aheckmann/gm 1 https://github.com/microsoft/workspace-tools 1 https://github.com/autovance/ftp-srv 1 https://github.com/shenfw1987/impala 1 https://github.com/ethereum/web3.js 1 https://github.com/atlassian/moo 1 https://github.com/totaljs/framework4 1 https://github.com/xjamundx/gitblame 1 https://github.com/bentruyman/pulverizr 1 https://github.com/nodemailer/nodemailer 1 https://github.com/ButterCMS/buttercms-js 1 https://github.com/roest01/node-pdf-image 1 https://github.com/akoskm/create-mcp-server-stdio 1 https://github.com/clerk/javascript 1 https://github.com/angus-c/just 1 https://github.com/simpleledger/slp-validate 1 https://github.com/Budibase/budibase 1 https://github.com/react-atomic/react-atomic-organism 1 https://github.com/driverdan/node-XMLHttpRequest 1 https://github.com/deoxxa/dotty 1 https://github.com/samradical/google-cloudstorage-commands 1 https://github.com/izatop/bunt 1 https://github.com/VladimirShestakov/merge-change 1 https://github.com/kucherenko/blamer 1 https://github.com/saeedseyfi/exec-local-bin 1 https://github.com/auth0/node-jsonwebtoken 1 https://github.com/chardos/get-git-data 1 https://github.com/zestedesavoir/zmarkdown 1 https://github.com/stoqey/gnuplot 1 https://github.com/payloadcms/payload 1 https://github.com/thingsSDK/wifiscanner 1 https://github.com/xmldom/xmldom 1 https://github.com/CubetLabs/ffmpeg-sdk 1 https://github.com/browserify/sha.js 1 https://github.com/ASaiAnudeep/deep-override 1 https://github.com/RIAEvangelist/node-ipc 1 https://github.com/kevva/decompress 1 https://github.com/appium/appium-desktop 1 https://github.com/rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831 1 https://github.com/oxyno-zeta/react-editable-json-tree 1 https://github.com/umami-software/umami 1 https://github.com/rolangom/wincred 1 https://github.com/loge5/conf-cfg-ini 1 https://github.com/jprichardson/field 1 https://github.com/naver/billboard.js 1 https://github.com/shime/find-exec 1 https://github.com/vitest-dev/vitest 1 https://github.com/dherault/serverless-offline 1 https://github.com/ali-security/mongoose 1 https://github.com/kooinam/awesome_react_utility 1 https://github.com/paypal/nemo-appium 1 https://github.com/kvz/locutus 1 https://github.com/Manak/npm-programmatic 1 https://github.com/CleverTap/clevertap-cordova 1 https://github.com/frenchbread/private-ip 1 https://github.com/nestjs/nest 1 https://github.com/yuda-lyu/w-zip 1 https://github.com/ronomon/opened 1 https://github.com/TogaTech/tEnvoy 1 https://github.com/bi-a/mydatepicker 1 https://github.com/KyleRoss/windows-cpu 1 https://github.com/jsonata-js/jsonata 1 https://github.com/Soontao/cycle-import-check 1 https://github.com/libp2p/js-libp2p-secio 1 https://github.com/steveukx/git-js 1 https://github.com/form-data/form-data 1 https://github.com/tschaub/gh-pages 1 https://github.com/luisivan/node-picotts 1 https://github.com/IonicaBizau/set-or-get.js 1 https://github.com/andrei-tatar/nora-firebase-common 1 https://github.com/barneycarroll/npm-dependency-versions 1 https://github.com/fortruce/node-ps 1 https://github.com/agnaistic/agnai 1 https://github.com/pjshumphreys/patchmerge 1 https://github.com/eggjs/egg-scripts 1 https://github.com/commenthol/serialize-to-js 1 https://github.com/feross/git-pull-or-clone 1 https://github.com/cloudflare/workers-sdk 1 https://github.com/pillys/fs-path 1 https://github.com/codeceptjs/CodeceptJS 1 https://github.com/vercel/next.js 1 https://github.com/mfncooper/mockery 1 https://github.com/AndriiHeonia/hull 1 https://github.com/appLhui/mock2easy 1 https://github.com/llooiicc/sonar-wrapper 1 https://github.com/algolia/algoliasearch-helper-js 1 https://github.com/TooTallNate/node-https-proxy-agent 1 https://github.com/peterbraden/node-opencv 1 https://github.com/lukeed/dset 1 https://github.com/bigpipe/predefine 1 https://github.com/AnneTheDev/nobelprize 1 https://github.com/eugeneware/changeset 1 https://github.com/indutny/elliptic 1 https://github.com/github/hubot-scripts 1 https://github.com/commenthol/versionn 1 https://github.com/dwyl/hapi-auth-jwt2 1