flatmap-stream vulnerabilities

security holding package

Registry
npm
Latest
0.0.1-security

3 known advisories

The latest version, 0.0.1-security, is affected by 2 of them. Some versions were published with malicious code: remove them and rotate any secrets the install could read.

Security advisories for flatmap-stream

  • CriticalMAL-2025-2069014 Aug 2025

    Malicious code in a published version

    Affected
    All versions
    Fixed in
    No fix released
  • CriticalGHSA-9x64-5r7x-2q531 Sept 2020

    Malicious Package in flatmap-stream

    Affected
    0.1.1
    Fixed in
    No fix released
  • CriticalGHSA-mh6f-8j2x-448326 Nov 2018

    Critical severity vulnerability that affects event-stream and flatmap-stream

    Affected
    All versions
    Fixed in
    No fix released

Which of your client projects still run an old flatmap-stream?

NPMscan reads the package-lock.json, yarn.lock and pnpm-lock.yaml in every GitHub repo you pick and checks each installed version against these advisories, including the packages your packages pull in. Each finding comes with the command that fixes it.

Other npm packages

Advisory data from OSV.dev (opens OSV.dev in a new tab), refreshed daily. Package details from the npm registry.