npm Package Vulnerabilities

All 2,957 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,177 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 901.arrayfire-js1 CVE
  2. 902.arr-flatten-unflatten1 CVE
  3. 903.asciitable.js1 CVE
  4. 904.@astrojs/rss1 CVE
  5. 905.async1 CVE
  6. 906.@asyncapi/java-spring-cloud-stream-template1 CVE
  7. 907.@asyncapi/modelina1 CVE
  8. 908.atlasboard1 CVE
  9. 909.@atlaskit/editor-core1 CVE
  10. 910.atlassian-connect-express1 CVE
  11. 911.atob1 CVE
  12. 912.atom-node-module-installer1 CVE
  13. 913.audify1 CVE
  14. 914.augustine1 CVE
  15. 915.aurelia-framework1 CVE
  16. 916.aurelia-path1 CVE
  17. 917.auth01 CVE
  18. 918.auth-fetch-mcp1 CVE
  19. 919.automagik-genie1 CVE
  20. 920.@aws/agentcore1 CVE
  21. 921.@aws-amplify/cli1 CVE
  22. 922.@aws-amplify/codegen-ui-react1 CVE
  23. 923.@aws-cdk/aws-eks1 CVE
  24. 924.aws-lambda1 CVE
  25. 925.aws-lambda-multipart-parser1 CVE
  26. 926.aws-sdk1 CVE
  27. 927.@aws-sdk/shared-ini-file-loader1 CVE
  28. 928.@awsui/components-react1 CVE
  29. 929.axios-cache-interceptor1 CVE
  30. 930.azle1 CVE
  31. 931.@azure/identity1 CVE
  32. 932.@azure/mcp1 CVE
  33. 933.@azure/msal-node1 CVE
  34. 934.@azure/ms-rest-nodeauth1 CVE
  35. 935.babelcli1 CVE
  36. 936.@babel/core1 CVE
  37. 937.@babel/helpers1 CVE
  38. 938.@babel/plugin-transform-modules-systemjs1 CVE
  39. 939.@babel/runtime1 CVE
  40. 940.@babel/runtime-corejs21 CVE
  41. 941.@babel/runtime-corejs31 CVE
  42. 942.@babel/traverse1 CVE
  43. 943.babel-traverse1 CVE
  44. 944.backbone1 CVE
  45. 945.backbone-query-parameters1 CVE
  46. 946.backslash1 CVE
  47. 947.@backstage/backend-app-api1 CVE
  48. 948.@backstage/backend-common1 CVE
  49. 949.@backstage/catalog-model1 CVE
  50. 950.@backstage/cli-common1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →