Malicious code in twilio-voice-js-reference-components (npm)
osv · GHSA-5wvr-g236-9w68 · GHSA-6547-hjjw-237x
npm: twilio-voice-js-reference-components
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · GHSA-5wvr-g236-9w68 · GHSA-6547-hjjw-237x
npm: twilio-voice-js-reference-components
osv · GHSA-5v45-27j3-r52f · GHSA-fgwj-qvjx-g92h
npm: ux-metrics-client-interaction-subscriber
osv · GHSA-fmrp-cpm8-5245 · GHSA-jcxm-5v55-599q · SNYK-JS-DEPUPAWSSDKCREDENTIALPROVIDERPROCESS-18584483
npm: transform-es2015-unicode-regex
osv · GHSA-h9j7-rx3x-rwhc · GHSA-vmrp-3pwx-mj42
npm: nx-app
osv · GHSA-mfwv-9gcf-2mww
npm: wos-library
osv ·
npm: @egencia/uitk-global-styles
osv · GHSA-cr8h-v4vp-m4m8
npm: ts-eslint-helper
osv ·
npm: speaker_tagging_media_player
osv · GHSA-r8mg-hv3j-fc44
npm: tool-registry-scripts
osv · GHSA-r69p-2jjg-vh25
npm: pilgrimage-portal-client
osv ·
npm: @egencia/uitk-react-spacing
osv ·
npm: @client-web-next/ab-landing-form
osv ·
npm: @client-web-next/analytics
osv ·
npm: @client-web-next/navigation-link
osv · GHSA-5rgj-m8xx-vvvj
npm: akamai-sensor
osv ·
npm: @client-web-next/event-bus-listener
osv ·
npm: @egencia/uitk-react-layout-flex
osv ·
npm: @client-web-next/api-metrics
osv · GHSA-9cfc-3wfm-r8p5
npm: matlab-azure-devops-extension
osv ·
npm: mercuriusdream-oidc-replay-probe
osv · GHSA-m4g7-2mxw-5m83
npm: knowledge-grader
osv · GHSA-v36x-48h2-hc4f · SNYK-JS-BCCDESIGN-19003146
npm: bcc-design
osv · GHSA-xg8f-3qvf-9cfp
npm: frank-apple-utils
osv · GHSA-62wp-x489-6g6h
npm: glia-functions-tools
osv ·
npm: fastify-client-bundler
osv · GHSA-p2vx-mw75-76fw
npm: dynstrg-howto
osv · GHSA-6xhg-r9f8-79h9
npm: dbk-ui-forms
osv · GHSA-mxx2-5pvc-7hc9
npm: electrode-ota-ui-app
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.