[mistercow]

It sounds like these Snyk folks have a CLI that can check your node modules against their database. I haven't tried it though, so all I have to go on is their feature page.

[aviadR]

There is also a way to test on the website, if your project is hosted