npm Package Vulnerabilities
All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 851.ag-psd1 CVE
- 852.ai1 CVE
- 853.@aiondadotcom/mcp-ssh1 CVE
- 854.airbrake1 CVE
- 855.air-sdk1 CVE
- 856.@airvertco/frappejs1 CVE
- 857.@ai-sdk/provider-utils1 CVE
- 858.@akbr/patch-into1 CVE
- 859.@akbr/update1 CVE
- 860.@akoskm/create-mcp-server-stdio1 CVE
- 861.@alexbinary/object-deep-assign1 CVE
- 862.@alizeait/unflatto1 CVE
- 863.@allanlancioni/flatten-json1 CVE
- 864.@almela/obx1 CVE
- 865.altair-express-middleware1 CVE
- 866.altair-fastify-plugin1 CVE
- 867.altair-koa-middleware1 CVE
- 868.altair-static1 CVE
- 869.altcha1 CVE
- 870.altcha-lib1 CVE
- 871.alto-saxophone1 CVE
- 872.@amoy/common1 CVE
- 873.anchorme1 CVE
- 874.@andrea9293/mcp-documentation-server1 CVE
- 875.@andrei-tatar/nora-firebase-common1 CVE
- 876.@anephenix/hub1 CVE
- 877.angular-base64-upload1 CVE
- 878.angular-http-server1 CVE
- 879.angular-jwt1 CVE
- 880.angular-redactor1 CVE
- 881.angular-sanitize1 CVE
- 882.angular-server-side-configuration1 CVE
- 883.angular-ui-notification1 CVE
- 884.ansi2html1 CVE
- 885.ansi-html1 CVE
- 886.ansi-regex1 CVE
- 887.ansi_up1 CVE
- 888.@antfu/utils1 CVE
- 889.@anthropic-ai/sandbox-runtime1 CVE
- 890.antsword1 CVE
- 891.@aofl/cli-lib1 CVE
- 892.@apeleghq/asn1-der1 CVE
- 893.apexcharts1 CVE
- 894.apex-publish-static-files1 CVE
- 895.apiconnect-cli-plugins1 CVE
- 896.@apidevtools/json-schema-ref-parser1 CVE
- 897.api-lab-mcp1 CVE
- 898.apk-parser1 CVE
- 899.apk-parser21 CVE
- 900.apk-parser31 CVE
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Book a Demo →