npm
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 57 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 8, 2021 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash
Poisoned WhatsApp API package steals messages and accounts
Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets
body-parser vulnerable to denial of service when url encoding is used
Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub
Shai-Hulud worm returns, belches secrets to 25K GitHub repos
Malicious NPM packages abuse Adspect redirects to evade security
Crims poison 150K+ npm packages with token-farming malware
Monitor npm in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.