npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 2,601.short-video-maker1 CVE
  2. 2,602.shout1 CVE
  3. 2,603.shvl1 CVE
  4. 2,604.@sideway/formula1 CVE
  5. 2,605.@signalk/resources-provider1 CVE
  6. 2,606.@signalk/set-system-time1 CVE
  7. 2,607.sigstore1 CVE
  8. 2,608.@sigstore/core1 CVE
  9. 2,609.@sigstore/verify1 CVE
  10. 2,610.@simonsmith/cypress-image-snapshot1 CVE
  11. 2,611.simple-get1 CVE
  12. 2,612.@simple-git/argv-parser1 CVE
  13. 2,613.simplemde1 CVE
  14. 2,614.simple-npm-registry1 CVE
  15. 2,615.simple-plist1 CVE
  16. 2,616.simple-swizzle1 CVE
  17. 2,617.simpl-schema1 CVE
  18. 2,618.simstudio1 CVE
  19. 2,619.@siteboon/claudecodeui1 CVE
  20. 2,620.siteserver1 CVE
  21. 2,621.sjcl1 CVE
  22. 2,622.skeemas1 CVE
  23. 2,623.sketchsvg1 CVE
  24. 2,624.skywalking-backend-js1 CVE
  25. 2,625.slashify1 CVE
  26. 2,626.slimerjs-edge1 CVE
  27. 2,627.slim-select1 CVE
  28. 2,628.slug1 CVE
  29. 2,629.sly071 CVE
  30. 2,630.smartbanner.js1 CVE
  31. 2,631.smartctl1 CVE
  32. 2,632.smb1 CVE
  33. 2,633.smol-toml1 CVE
  34. 2,634.smoothie1 CVE
  35. 2,635.smtp-server1 CVE
  36. 2,636.snarkjs1 CVE
  37. 2,637.snyk-docker-plugin1 CVE
  38. 2,638.snyk-go-plugin1 CVE
  39. 2,639.snyk-mvn-plugin1 CVE
  40. 2,640.snyk-php-plugin1 CVE
  41. 2,641.snyk-python-plugin1 CVE
  42. 2,642.snyk-sbt-plugin1 CVE
  43. 2,643.@snyk/snyk-cocoapods-plugin1 CVE
  44. 2,644.@snyk/snyk-hex-plugin1 CVE
  45. 2,645.soci1 CVE
  46. 2,646.@socket.io/cluster-engine1 CVE
  47. 2,647.@soketi/soketi1 CVE
  48. 2,648.@solana/pay1 CVE
  49. 2,649.solid-js1 CVE
  50. 2,650.sonar-wrapper1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →