Changes Scan Docs Trust

When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

Watching 44 sources · checked 2 h ago

Changes

2158
in the catalog: 1153
new this week: 62
dated ahead

Google Gemini2 h ago · 57
Goon demand · 87
Maven · Gradleon demand · 44
npmon demand · 913
Groq10 h ago · 43
Cargoon demand · 108
PyPIon demand · 243
Twitch10 h ago · 5
Bitbucket11 h ago · 0
GitLab11 h ago · 43
Context711 h ago · 0
RubyGems11 h ago · 83
Tavily11 h ago · 0
GitHub11 h ago · 23
Stripe11 h ago · 167

What's new

npm packages9 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)breaks on upgrade +13
RubyGems packages10 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantizesecurity +8
RubyGems packages10 h ago

Picked up, last 30 days

one dot per day · bigger is more

npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing

✕security

RubyGems packages10 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security +3

RubyGems packages10 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security +6

RubyGems packages10 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security

PyPI packages10 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade +21

Cargo packages10 h agopin-utils: `pin-utils` is unmaintained✕security

GitLab11 h agometrics.prometheus.port deprecated–notice +42

npm packages1 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade +5

GitHub1 d agorerank-multilingual-v2.0 shutdown✕already broken +22

npm packages2 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade +34

913

: 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05

PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05

Stripe167: 167 on 2026-10-27

OpenAI145: 145 on 2026-10-27

Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05

Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30

RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05

Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03

Google Gemini57: 57 on 2026-10-27

Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31

10-08today

Coming up

Nebius Token Factory · 11in 3 days
Google Gemini · 5in 11 days
api.relay.linkin 18 days

1–60 of 913

2026-11

@babel/core: @babel/core: Arbitrary File Read via sourceMappingURL Comment
npm · @babel/coresecurity
Quote
“@babel/core: Arbitrary File Read via sourceMappingURL Comment”
osv.dev ›
@babel/helpers: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
npm · @babel/helperssecurity
Quote
“Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups”
osv.dev ›
ajv: ajv has ReDoS when using `$data` option
npm · ajvsecurity
Quote
“ajv has ReDoS when using $data option”
osv.dev ›
ajv: Prototype Pollution in Ajv
npm · ajvsecurity
Quote
“Prototype Pollution in Ajv”
osv.dev ›
ansi-regex: Inefficient Regular Expression Complexity in chalk/ansi-regex
npm · ansi-regexsecurity
Quote
“Inefficient Regular Expression Complexity in chalk/ansi-regex”
osv.dev ›

2026-10

@babel/plugin-transform-modules-systemjs: @babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input
npm · @babel/plugin-transform-modules-systemjssecurity
Quote
“@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input”
osv.dev ›
@babel/runtime-corejs3: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
npm · @babel/runtime-corejs3security
Quote
“Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups”
osv.dev ›
@babel/runtime: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
npm · @babel/runtimesecurity
Quote
“Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups”
osv.dev ›
@babel/traverse: Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
npm · @babel/traversesecurity
Quote
“Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code”
osv.dev ›
@better-auth/drizzle-adapter: @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
npm · @better-auth/drizzle-adaptersecurity
Quote
“@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL”
osv.dev ›
@fastify/busboy: @fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name
npm · @fastify/busboysecurity
Quote
“@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name”
osv.dev ›
@fastify/busboy: @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
npm · @fastify/busboysecurity
Quote
“@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header”
osv.dev ›
@grpc/grpc-js: @grpc/grpc-js: A malformed request can cause a server crash
npm · @grpc/grpc-jssecurity
Quote
“@grpc/grpc-js: A malformed request can cause a server crash”
osv.dev ›
@grpc/grpc-js: @grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash
npm · @grpc/grpc-jssecurity
Quote
“@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash”
osv.dev ›
@grpc/grpc-js: @grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages
npm · @grpc/grpc-jssecurity
Quote
“@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages”
osv.dev ›
@grpc/grpc-js: @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized
npm · @grpc/grpc-jssecurity
Quote
“@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized”
osv.dev ›
@humanfs/node: humanfs: Recursive copy follows symlinked files and copies data from outside the source tree
npm · @humanfs/nodesecurity
Quote
“humanfs: Recursive copy follows symlinked files and copies data from outside the source tree”
osv.dev ›
@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning”
osv.dev ›
@openzeppelin/contracts-upgradeable: GovernorCompatibilityBravo may trim proposal calldata
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“GovernorCompatibilityBravo may trim proposal calldata”
osv.dev ›
@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts base64 encoding may read from potentially dirty memory
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“OpenZeppelin Contracts base64 encoding may read from potentially dirty memory”
osv.dev ›
@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts vulnerable to Improper Escaping of Output
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“OpenZeppelin Contracts vulnerable to Improper Escaping of Output”
osv.dev ›
@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated”
osv.dev ›
@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts vulnerable to ECDSA signature malleability
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts vulnerable to ECDSA signature malleability”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts ERC165Checker unbounded gas consumption
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts ERC165Checker unbounded gas consumption”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts contains Incorrect Calculation
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts contains Incorrect Calculation”
osv.dev ›
@openzeppelin/contracts: Improper Initialization in OpenZeppelin
npm · @openzeppelin/contractssecurity
Quote
“Improper Initialization in OpenZeppelin”
osv.dev ›
@openzeppelin/contracts: GovernorCompatibilityBravo may trim proposal calldata
npm · @openzeppelin/contractssecurity
Quote
“GovernorCompatibilityBravo may trim proposal calldata”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts base64 encoding may read from potentially dirty memory
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts base64 encoding may read from potentially dirty memory”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts vulnerable to Improper Escaping of Output
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts vulnerable to Improper Escaping of Output”
osv.dev ›
@openzeppelin/contracts: GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior
npm · @openzeppelin/contractssecurity
Quote
“GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts's ERC165Checker may revert instead of returning false”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals”
osv.dev ›
@protobufjs/utf8: protobufjs has overlong UTF-8 decoding
npm · @protobufjs/utf8security
Quote
“protobufjs has overlong UTF-8 decoding”
osv.dev ›
@remix-run/router: React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
npm · @remix-run/routersecurity
Quote
“React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation”
osv.dev ›
@remix-run/router: React Router vulnerable to XSS via Open Redirects
npm · @remix-run/routersecurity
Quote
“React Router vulnerable to XSS via Open Redirects”
osv.dev ›
@solana/web3.js: Handling untrusted input can result in a crash, leading to loss of availability / denial of service
npm · @solana/web3.jssecurity
Quote
“Handling untrusted input can result in a crash, leading to loss of availability / denial of service”
osv.dev ›
@stablelib/ed25519: StableLib Ed25519 Signature Malleability via Missing S < L Check
npm · @stablelib/ed25519security
Quote
“StableLib Ed25519 Signature Malleability via Missing S < L Check”
osv.dev ›
@tootallnate/once: @tootallnate/once vulnerable to Incorrect Control Flow Scoping
npm · @tootallnate/oncesecurity
Quote
“@tootallnate/once vulnerable to Incorrect Control Flow Scoping”
osv.dev ›
@vitest/mocker: Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
npm · @vitest/mockersecurity
Quote
“Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock”
osv.dev ›
@vitest/mocker: Vitest: Code injection via unauthenticated manual mock registration
npm · @vitest/mockersecurity
Quote
“Vitest: Code injection via unauthenticated manual mock registration”
osv.dev ›
@vitest/mocker: Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
npm · @vitest/mockersecurity
Quote
“Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix”
osv.dev ›
adm-zip: adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
npm · adm-zipsecurity
Quote
“adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)”
osv.dev ›
adm-zip: adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)
npm · adm-zipsecurity
Quote
“adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)”
osv.dev ›
adm-zip: adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path
npm · adm-zipsecurity
Quote
“adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path”
osv.dev ›
adm-zip: adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
npm · adm-zipsecurity
Quote
“adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation”
osv.dev ›
adm-zip: adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content
npm · adm-zipsecurity
Quote
“adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content”
osv.dev ›
adm-zip: adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0
npm · adm-zipsecurity
Quote
“adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0”
osv.dev ›
adm-zip: adm-zip: Crafted ZIP file triggers 4GB memory allocation
npm · adm-zipsecurity
Quote
“adm-zip: Crafted ZIP file triggers 4GB memory allocation”
osv.dev ›
async: Prototype Pollution in async
npm · asyncsecurity
Quote
“Prototype Pollution in async”
osv.dev ›
axios: axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
npm · axiossecurity
Quote
“axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in config.proxy”
osv.dev ›
axios: axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
npm · axiossecurity
Quote
“axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge”
osv.dev ›
axios: Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF
npm · axiossecurity
Quote
“Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF”
osv.dev ›
axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`
npm · axiossecurity
Quote
“Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in parseReviver”
osv.dev ›
axios: Axios: Excessive recursion in formDataToJSON can cause denial of service
npm · axiossecurity
Quote
“Axios: Excessive recursion in formDataToJSON can cause denial of service”
osv.dev ›
axios: Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
npm · axiossecurity
Quote
“Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig”
osv.dev ›

Anthropic

Anthropic

claude-sonnet-4-5-20250929in 24 days

OpenAI

OpenAI

OpenAI · 3in 25 days