npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 801.@75lb/deep-merge1 CVE
  2. 802.a11y-mcp1 CVE
  3. 803.@a2ui/web_core1 CVE
  4. 804.abacus-ext-cmdline1 CVE
  5. 805.@absolunet/kafe1 CVE
  6. 806.@abw/badger-database1 CVE
  7. 807.@acastellon/auth1 CVE
  8. 808.accesslog1 CVE
  9. 809.access-policy1 CVE
  10. 810.@acrontum/filesystem-template1 CVE
  11. 811.@actions/artifact1 CVE
  12. 812.@actions/http-client1 CVE
  13. 813.actual1 CVE
  14. 814.@actual-app/cli1 CVE
  15. 815.@actual-app/web1 CVE
  16. 816.adamvr-geoip-lite1 CVE
  17. 817.adb-driver1 CVE
  18. 818.adb-mcp1 CVE
  19. 819.@adolph_dudu/ratio-swiper1 CVE
  20. 820.@adonisjs/core1 CVE
  21. 821.@adonisjs/lucid1 CVE
  22. 822.@aedart/support1 CVE
  23. 823.aerospike1 CVE
  24. 824.agentic-flow1 CVE
  25. 825.@agenticmail/claudecode1 CVE
  26. 826.@agenticmail/codex1 CVE
  27. 827.@agenticmail/mcp1 CVE
  28. 828.@agenticmail/openclaw1 CVE
  29. 829.ag-grid1 CVE
  30. 830.@ag-grid-enterprise/charts1 CVE
  31. 831.ai1 CVE
  32. 832.@aiondadotcom/mcp-ssh1 CVE
  33. 833.airbrake1 CVE
  34. 834.air-sdk1 CVE
  35. 835.@airvertco/frappejs1 CVE
  36. 836.@ai-sdk/provider-utils1 CVE
  37. 837.@akbr/patch-into1 CVE
  38. 838.@akbr/update1 CVE
  39. 839.@akoskm/create-mcp-server-stdio1 CVE
  40. 840.@alexbinary/object-deep-assign1 CVE
  41. 841.@alizeait/unflatto1 CVE
  42. 842.@allanlancioni/flatten-json1 CVE
  43. 843.@almela/obx1 CVE
  44. 844.altcha1 CVE
  45. 845.altcha-lib1 CVE
  46. 846.alto-saxophone1 CVE
  47. 847.@amoy/common1 CVE
  48. 848.anchorme1 CVE
  49. 849.@andrea9293/mcp-documentation-server1 CVE
  50. 850.@andrei-tatar/nora-firebase-common1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →