npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 851.@anephenix/hub1 CVE
  2. 852.angular-base64-upload1 CVE
  3. 853.angular-http-server1 CVE
  4. 854.angular-jwt1 CVE
  5. 855.angular-redactor1 CVE
  6. 856.@angular/router1 CVE
  7. 857.angular-sanitize1 CVE
  8. 858.angular-server-side-configuration1 CVE
  9. 859.angular-ui-notification1 CVE
  10. 860.ansi2html1 CVE
  11. 861.ansi-html1 CVE
  12. 862.ansi-regex1 CVE
  13. 863.ansi_up1 CVE
  14. 864.@antfu/utils1 CVE
  15. 865.@anthropic-ai/sandbox-runtime1 CVE
  16. 866.antsword1 CVE
  17. 867.@aofl/cli-lib1 CVE
  18. 868.@apeleghq/asn1-der1 CVE
  19. 869.apexcharts1 CVE
  20. 870.apex-publish-static-files1 CVE
  21. 871.apiconnect-cli-plugins1 CVE
  22. 872.@apidevtools/json-schema-ref-parser1 CVE
  23. 873.api-lab-mcp1 CVE
  24. 874.apk-parser1 CVE
  25. 875.apk-parser21 CVE
  26. 876.apk-parser31 CVE
  27. 877.@apollo/composition1 CVE
  28. 878.@apollo/experimental-nextjs-app-support1 CVE
  29. 879.@apollo/explorer1 CVE
  30. 880.@apollo/federation-internals1 CVE
  31. 881.@apollo/sandbox1 CVE
  32. 882.@apollo/server1 CVE
  33. 883.apollo-server1 CVE
  34. 884.@apollosproject/data-connector-rock1 CVE
  35. 885.@apostrophecms/ai-helper1 CVE
  36. 886.@apostrophecms/cli1 CVE
  37. 887.@apostrophecms/db-connect1 CVE
  38. 888.@apostrophecms/login-hcaptcha1 CVE
  39. 889.@apostrophecms/login-recaptcha1 CVE
  40. 890.@apostrophecms/passport-bridge1 CVE
  41. 891.@apostrophecms/seo1 CVE
  42. 892.@apphp/object-resolver1 CVE
  43. 893.@appium/base-driver1 CVE
  44. 894.appium-chromedriver1 CVE
  45. 895.appium-desktop1 CVE
  46. 896.appium-mcp1 CVE
  47. 897.appwrite-cli1 CVE
  48. 898.arcanist1 CVE
  49. 899.argencoders-notevil1 CVE
  50. 900.@argos-ci/core1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →