低危2024/06/02Publicly accessible NPM Log fileNPM log file is exposed to external users.npmPoC 已收录CVSS—
低危2024/01/15NPM Anonymous CLI Metrics Jsonanonymous-cli-metrics.json internal file in NPM is exposed.npmPoC 已收录CVSS—
低危2023/10/20NPM package.json DisclosureAll NodeJS packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project generated by package managers such as npm, yarn, pnpm. Node.jsnpmPoC 已收录RCECVSS—