npm Package Vulnerabilities

All 2,689 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,610 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 651.websocket-driver2 CVEs
  2. 652.@wonderwhy-er/desktop-commander2 CVEs
  3. 653.@workos-inc/authkit-remix2 CVEs
  4. 654.xmlhttprequest-ssl2 CVEs
  5. 655.yaml2 CVEs
  6. 656.zx2 CVEs
  7. 657.1011 CVE
  8. 658.11xiaoli1 CVE
  9. 659.22lixian1 CVE
  10. 660.360class.jansenhm1 CVE
  11. 661.6261 CVE
  12. 662.@75lb/deep-merge1 CVE
  13. 663.a11y-mcp1 CVE
  14. 664.abacus-ext-cmdline1 CVE
  15. 665.@absolunet/kafe1 CVE
  16. 666.@abw/badger-database1 CVE
  17. 667.@acastellon/auth1 CVE
  18. 668.accesslog1 CVE
  19. 669.access-policy1 CVE
  20. 670.@acrontum/filesystem-template1 CVE
  21. 671.@actions/artifact1 CVE
  22. 672.@actions/http-client1 CVE
  23. 673.actual1 CVE
  24. 674.@actual-app/cli1 CVE
  25. 675.@actual-app/web1 CVE
  26. 676.adamvr-geoip-lite1 CVE
  27. 677.adb-driver1 CVE
  28. 678.adb-mcp1 CVE
  29. 679.@adolph_dudu/ratio-swiper1 CVE
  30. 680.@adonisjs/core1 CVE
  31. 681.@adonisjs/http-server1 CVE
  32. 682.@adonisjs/lucid1 CVE
  33. 683.@aedart/support1 CVE
  34. 684.aerospike1 CVE
  35. 685.agentic-flow1 CVE
  36. 686.@agenticmail/claudecode1 CVE
  37. 687.@agenticmail/codex1 CVE
  38. 688.@agenticmail/mcp1 CVE
  39. 689.@agenticmail/openclaw1 CVE
  40. 690.ag-grid1 CVE
  41. 691.@ag-grid-enterprise/charts1 CVE
  42. 692.ai1 CVE
  43. 693.@aiondadotcom/mcp-ssh1 CVE
  44. 694.airbrake1 CVE
  45. 695.air-sdk1 CVE
  46. 696.@airvertco/frappejs1 CVE
  47. 697.@ai-sdk/provider-utils1 CVE
  48. 698.@akbr/patch-into1 CVE
  49. 699.@akbr/update1 CVE
  50. 700.@akoskm/create-mcp-server-stdio1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →