Comparison Overview
npm, Inc.

npm, Inc.
1999 Harrison St, Oakland, 94612, US
Last Update: 12/06/2026
Over 10 million software developers worldwide use npm, Inc.’s open source software and web registry to discover, share, and reuse packages of code. Our users download over 800,000 packages more than 7 billion times per week, and registry downloads have grown by more tha...

UKG
N/A
Last Update: 01/04/2026
UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched. I...
Compliance Ranges Comparison

npm, Inc.







UKG






Benchmark & Cyber Underwriting Signals
Incidents vs Software Development Industry Avg (This Year)
npm, Inc. has 1956.07% more incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Software Development Industry Avg (This Year)
No incidents recorded for UKG in 2026.
Incident History - npm, Inc. (X = Date, Y = Severity)
npm, Inc. cyber incidents detection timeline including parent company and subsidiaries.
Incident History - UKG (X = Date, Y = Severity)
UKG cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

npm, Inc.

UKG
FAQ
Latest Global CVEs
Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.27.12.
Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may allow a remote attacker operating a cross-origin iframe to obtain credentials autofilled for the parent web page via incorrect autofill field selection. This issue affects Avira Password Manager when used with Mozilla Firefox on Windows, macOS, and Linux.
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.76.
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.
Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.104.