0 verbose cli /root/.hermes/node/bin/node /usr/local/bin/npm
1 info using npm@11.19.1
2 info using node@v26.8.2
3 silly config load:file:/root/.hermes/node/lib/node_modules/npm/npmrc
4 silly config load:file:/usr/local/lib/hermes-agent/.npmrc
5 silly config load:file:/root/.npmrc
6 silly config load:file:/root/.hermes/node/etc/npmrc
7 verbose title npm audit
8 verbose argv "audit" "--json" "--workspaces" "false"
9 verbose logfile logs-max:10 dir:/root/.npm/_logs/2026-09-12T07_51_49_629Z-
10 verbose logfile /root/.npm/_logs/2026-09-12T07_51_49_629Z-debug-0.log
11 silly logfile done cleaning log files
12 silly packumentCache heap:2248146944 maxSize:562036736 maxEntrySize:281018368
13 silly audit bulk request {
13 silly audit   '@babel/code-frame': [ '7.29.7' ],
13 silly audit   '@babel/compat-data': [ '7.29.7' ],
13 silly audit   '@babel/core': [ '7.29.7' ],
13 silly audit   semver: [ '7.8.5', '6.3.1' ],
13 silly audit   '@babel/generator': [ '7.29.7' ],
13 silly audit   '@babel/helper-compilation-targets': [ '7.29.7' ],
13 silly audit   '@babel/helper-globals': [ '7.29.7' ],
13 silly audit   '@babel/helper-string-parser': [ '7.29.7' ],
13 silly audit   '@babel/helper-validator-identifier': [ '7.29.7' ],
13 silly audit   '@babel/helper-validator-option': [ '7.29.7' ],
13 silly audit   '@babel/helpers': [ '7.29.7' ],
13 silly audit   '@babel/parser': [ '7.29.7' ],
13 silly audit   '@babel/template': [ '7.29.7' ],
13 silly audit   '@babel/traverse': [ '7.29.7' ],
13 silly audit   '@babel/types': [ '7.29.7' ],
13 silly audit   ignore: [ '7.0.6', '5.3.2' ],
13 silly audit   'js-tokens': [ '4.0.0' ],
13 silly audit   'lru-cache': [ '5.1.1' ],
13 silly audit   '@babel/helper-module-imports': [ '7.29.7' ],
13 silly audit   '@babel/helper-module-transforms': [ '7.29.7' ],
13 silly audit   minimatch: [ '10.2.6' ],
13 silly audit   '@eslint-community/eslint-utils': [ '4.9.1' ],
13 silly audit   'eslint-visitor-keys': [ '3.4.3', '5.0.1' ],
13 silly audit   '@eslint-community/regexpp': [ '4.12.2' ],
13 silly audit   '@eslint/config-array': [ '0.23.5' ],
13 silly audit   '@eslint/config-helpers': [ '0.7.0' ],
13 silly audit   '@eslint/core': [ '1.2.1' ],
13 silly audit   '@eslint/js': [ '9.39.5' ],
13 silly audit   '@eslint/object-schema': [ '3.0.5' ],
13 silly audit   '@eslint/plugin-kit': [ '0.7.2' ],
13 silly audit   '@humanfs/core': [ '0.19.2' ],
13 silly audit   '@humanfs/node': [ '0.16.8' ],
13 silly audit   '@humanfs/types': [ '0.15.0' ],
13 silly audit   '@humanwhocodes/module-importer': [ '1.0.1' ],
13 silly audit   '@humanwhocodes/retry': [ '0.4.3' ],
13 silly audit   '@jridgewell/gen-mapping': [ '0.3.13' ],
13 silly audit   '@jridgewell/remapping': [ '2.3.5' ],
13 silly audit   '@jridgewell/resolve-uri': [ '3.1.2' ],
13 silly audit   '@jridgewell/sourcemap-codec': [ '1.5.5' ],
13 silly audit   '@jridgewell/trace-mapping': [ '0.3.31' ],
13 silly audit   '@types/esrecurse': [ '4.3.1' ],
13 silly audit   '@types/estree': [ '1.0.9' ],
13 silly audit   '@types/json-schema': [ '7.0.15' ],
13 silly audit   '@typescript-eslint/eslint-plugin': [ '8.64.0' ],
13 silly audit   '@typescript-eslint/parser': [ '8.64.0' ],
13 silly audit   '@typescript-eslint/project-service': [ '8.64.0' ],
13 silly audit   '@typescript-eslint/scope-manager': [ '8.64.0' ],
13 silly audit   '@typescript-eslint/tsconfig-utils': [ '8.64.0' ],
13 silly audit   '@typescript-eslint/type-utils': [ '8.64.0' ],
13 silly audit   '@typescript-eslint/types': [ '8.64.0' ],
13 silly audit   '@typescript-eslint/typescript-estree': [ '8.64.0' ],
13 silly audit   '@typescript-eslint/utils': [ '8.64.0' ],
13 silly audit   '@typescript-eslint/visitor-keys': [ '8.64.0' ],
13 silly audit   acorn: [ '8.17.0' ],
13 silly audit   'acorn-jsx': [ '5.3.2' ],
13 silly audit   ajv: [ '6.15.0' ],
13 silly audit   isexe: [ '2.0.0' ],
13 silly audit   'json-schema-traverse': [ '0.4.1' ],
13 silly audit   which: [ '2.0.2' ],
13 silly audit   'balanced-match': [ '4.0.4' ],
13 silly audit   'baseline-browser-mapping': [ '2.10.43' ],
13 silly audit   'brace-expansion': [ '5.0.9' ],
13 silly audit   browserslist: [ '4.28.6' ],
13 silly audit   'caniuse-lite': [ '1.0.30001806' ],
13 silly audit   'convert-source-map': [ '2.0.0' ],
13 silly audit   'cross-spawn': [ '7.0.6' ],
13 silly audit   debug: [ '4.4.3' ],
13 silly audit   'deep-is': [ '0.1.4' ],
13 silly audit   'electron-to-chromium': [ '1.5.393' ],
13 silly audit   escalade: [ '3.2.0' ],
13 silly audit   'escape-string-regexp': [ '4.0.0' ],
13 silly audit   eslint: [ '10.8.0' ],
13 silly audit   'eslint-plugin-perfectionist': [ '5.10.0' ],
13 silly audit   'eslint-plugin-react-hooks': [ '7.1.1' ],
13 silly audit   'eslint-plugin-unused-imports': [ '4.4.1' ],
13 silly audit   'eslint-scope': [ '9.1.2' ],
13 silly audit   espree: [ '11.2.0' ],
13 silly audit   esquery: [ '1.7.0' ],
13 silly audit   esrecurse: [ '4.3.0' ],
13 silly audit   estraverse: [ '5.3.0' ],
13 silly audit   esutils: [ '2.0.3' ],
13 silly audit   'fast-deep-equal': [ '3.1.3' ],
13 silly audit   'fast-json-stable-stringify': [ '2.1.0' ],
13 silly audit   'fast-levenshtein': [ '2.0.6' ],
13 silly audit   fdir: [ '6.5.0' ],
13 silly audit   'file-entry-cache': [ '8.0.0' ],
13 silly audit   'find-up': [ '5.0.0' ],
13 silly audit   'flat-cache': [ '4.0.1' ],
13 silly audit   flatted: [ '3.4.2' ],
13 silly audit   gensync: [ '1.0.0-beta.2' ],
13 silly audit   'glob-parent': [ '6.0.2' ],
13 silly audit   globals: [ '17.7.0' ],
13 silly audit   'hermes-estree': [ '0.25.1' ],
13 silly audit   'hermes-parser': [ '0.25.1' ],
13 silly audit   yallist: [ '3.1.1' ],
13 silly audit   imurmurhash: [ '0.1.4' ],
13 silly audit   'is-extglob': [ '2.1.1' ],
13 silly audit   'is-glob': [ '4.0.3' ],
13 silly audit   jiti: [ '2.7.0' ],
13 silly audit   jsesc: [ '3.1.0' ],
13 silly audit   'json-buffer': [ '3.0.1' ],
13 silly audit   'json-stable-stringify-without-jsonify': [ '1.0.1' ],
13 silly audit   json5: [ '2.2.3' ],
13 silly audit   keyv: [ '4.5.4' ],
13 silly audit   levn: [ '0.4.1' ],
13 silly audit   'locate-path': [ '6.0.0' ],
13 silly audit   ms: [ '2.1.3' ],
13 silly audit   'natural-compare': [ '1.4.0' ],
13 silly audit   'natural-orderby': [ '5.0.0' ],
13 silly audit   'node-releases': [ '2.0.51' ],
13 silly audit   optionator: [ '0.9.4' ],
13 silly audit   'p-limit': [ '3.1.0' ],
13 silly audit   'p-locate': [ '5.0.0' ],
13 silly audit   'path-exists': [ '4.0.0' ],
13 silly audit   'path-key': [ '3.1.1' ],
13 silly audit   picocolors: [ '1.1.1' ],
13 silly audit   picomatch: [ '4.0.5' ],
13 silly audit   'prelude-ls': [ '1.2.1' ],
13 silly audit   punycode: [ '2.3.1' ],
13 silly audit   'shebang-command': [ '2.0.0' ],
13 silly audit   'shebang-regex': [ '3.0.0' ],
13 silly audit   tinyglobby: [ '0.2.17' ],
13 silly audit   'ts-api-utils': [ '2.5.0' ],
13 silly audit   'type-check': [ '0.4.0' ],
13 silly audit   typescript: [ '6.0.3' ],
13 silly audit   'typescript-eslint': [ '8.64.0' ],
13 silly audit   'update-browserslist-db': [ '1.2.3' ],
13 silly audit   'uri-js': [ '4.4.1' ],
13 silly audit   'word-wrap': [ '1.2.5' ],
13 silly audit   'yocto-queue': [ '0.1.0' ],
13 silly audit   zod: [ '4.4.3' ],
13 silly audit   'zod-validation-error': [ '4.0.2' ]
13 silly audit }
14 http fetch POST 200 https://registry.npmjs.org/-/npm/v1/security/advisories/bulk 92ms
15 silly audit report {
15 silly audit report   'baseline-browser-mapping': [
15 silly audit report     {
15 silly audit report       id: 1193686,
15 silly audit report       url: 'https://github.com/advisories/GHSA-w5vr-8v7q-w6rv',
15 silly audit report       title: 'baseline-browser-mapping process termination on invalid input causes denial of service',
15 silly audit report       severity: 'moderate',
15 silly audit report       vulnerable_versions: '>=2.0.0 <2.11.0',
15 silly audit report       cwe: [Array],
15 silly audit report       cvss: [Object]
15 silly audit report     }
15 silly audit report   ],
15 silly audit report   browserslist: [
15 silly audit report     {
15 silly audit report       id: 1153171,
15 silly audit report       url: 'https://github.com/advisories/GHSA-c83g-rgw3-j3cx',
15 silly audit report       title: 'Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM',
15 silly audit report       severity: 'high',
15 silly audit report       vulnerable_versions: '<=4.28.6',
15 silly audit report       cwe: [Array],
15 silly audit report       cvss: [Object]
15 silly audit report     },
15 silly audit report     {
15 silly audit report       id: 1153172,
15 silly audit report       url: 'https://github.com/advisories/GHSA-73wf-gq98-2v4g',
15 silly audit report       title: 'Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)',
15 silly audit report       severity: 'high',
15 silly audit report       vulnerable_versions: '<=4.28.6',
15 silly audit report       cwe: [Array],
15 silly audit report       cvss: [Object]
15 silly audit report     }
15 silly audit report   ]
15 silly audit report }
16 silly packumentCache full:https://registry.npmjs.org/baseline-browser-mapping cache-miss
17 silly packumentCache full:https://registry.npmjs.org/browserslist cache-miss
18 http fetch GET 200 https://registry.npmjs.org/baseline-browser-mapping 33ms (cache revalidated)
19 silly packumentCache full:https://registry.npmjs.org/baseline-browser-mapping set size:629573 disposed:false
20 http fetch GET 200 https://registry.npmjs.org/browserslist 40ms (cache revalidated)
21 silly packumentCache full:https://registry.npmjs.org/browserslist set size:521015 disposed:false
22 silly packumentCache full:https://registry.npmjs.org/@babel%2fhelper-compilation-targets cache-miss
23 silly packumentCache full:https://registry.npmjs.org/update-browserslist-db cache-miss
24 http fetch GET 200 https://registry.npmjs.org/update-browserslist-db 18ms (cache revalidated)
25 silly packumentCache full:https://registry.npmjs.org/update-browserslist-db set size:71185 disposed:false
26 http fetch GET 200 https://registry.npmjs.org/@babel%2fhelper-compilation-targets 24ms (cache revalidated)
27 silly packumentCache full:https://registry.npmjs.org/@babel%2fhelper-compilation-targets set size:231860 disposed:false
28 verbose cwd /usr/local/lib/hermes-agent
29 verbose os Linux 7.0.0-30-generic
30 verbose node v26.8.2
31 verbose npm  v11.19.1
32 verbose exit 1
33 verbose code 1