Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
698965 source statements · aliases may refer to the same vulnerabilityMalicious code in lib-frontsga (npm)
osv · GHSA-gjrm-rjj5-9x2v
npm: lib-frontsga
Malicious code in google-internal-cloud-audit-security-check (npm)
osv · GHSA-cw6m-gmx9-x556
npm: google-internal-cloud-audit-security-check
Malicious code in graphql-js-client-transform (npm)
osv · GHSA-xm59-fwxf-vq6g
npm: graphql-js-client-transform
Malicious code in merchantweb-lang-cookie-reset (npm)
osv · GHSA-5vjj-p6vh-456m
npm: merchantweb-lang-cookie-reset
Malicious code in cewe-npm-cops (npm)
osv · GHSA-823q-q648-p3m6
npm: cewe-npm-cops
Malicious code in mx-www-locales-common (npm)
osv ·
npm: mx-www-locales-common
Malicious code in @yuva2210/okx-poc-preinstall (npm)
osv ·
npm: @yuva2210/okx-poc-preinstall
Malicious code in @wbnr/frontend-shared (npm)
osv · GHSA-9vgv-g4jx-8g9w
npm: @wbnr/frontend-shared
Malicious code in @ssgw/background-transition (npm)
osv ·
npm: @ssgw/background-transition
Malicious code in akamaijs-sensorv1 (npm)
osv · GHSA-vf6f-mfc3-9548
npm: akamaijs-sensorv1
Malicious code in @client-web-next/env-util (npm)
osv ·
npm: @client-web-next/env-util
Malicious code in @client-web-next/ua-parser (npm)
osv ·
npm: @client-web-next/ua-parser
Malicious code in @client-web-next/adaptive (npm)
osv ·
npm: @client-web-next/adaptive
Malicious code in @client-web-next/icons (npm)
osv ·
npm: @client-web-next/icons
Malicious code in @cartradetech/example-package (npm)
osv ·
npm: @cartradetech/example-package
Malicious code in @egencia/uitk-react-text (npm)
osv ·
npm: @egencia/uitk-react-text
Malicious code in @client-web-next/ui-business (npm)
osv ·
npm: @client-web-next/ui-business
Malicious code in @client-web-next/tarjeta-button (npm)
osv ·
npm: @client-web-next/tarjeta-button
Malicious code in @client-web-next/timer (npm)
osv ·
npm: @client-web-next/timer
Malicious code in @client-web-next/ab-tests (npm)
osv ·
npm: @client-web-next/ab-tests
Malicious code in @client-web-next/providers (npm)
osv ·
npm: @client-web-next/providers
Malicious code in @zig-design-system/react (npm)
osv · GHSA-rqjq-px4f-2m8r
npm: @zig-design-system/react
Malicious code in @yuva2210/poc-depconf (npm)
osv ·
npm: @yuva2210/poc-depconf
Malicious code in @egencia/uitk-global-styles-6 (npm)
osv ·
npm: @egencia/uitk-global-styles-6
Malicious code in @adominadmininstr/fmt-date-helper (npm)
osv ·
npm: @adominadmininstr/fmt-date-helper
Malicious code in @client-web-next/utils (npm)
osv ·
npm: @client-web-next/utils
Malicious code in @larocas-bbresearch/tp-probe-dc7a3670 (npm)
osv ·
npm: @larocas-bbresearch/tp-probe-dc7a3670
Malicious code in @client-web-next/feature-flags (npm)
osv ·
npm: @client-web-next/feature-flags
Malicious code in @client-web-next/transfer-state (npm)
osv ·
npm: @client-web-next/transfer-state
Malicious code in @adominadmininstr/date-util-helper (npm)
osv ·
npm: @adominadmininstr/date-util-helper
Malicious code in @client-web-next/origination-microfront (npm)
osv ·
npm: @client-web-next/origination-microfront
Malicious code in @egencia/uitk-react-foundation (npm)
osv ·
npm: @egencia/uitk-react-foundation
Malicious code in @client-web-next/logger (npm)
osv ·
npm: @client-web-next/logger
Malicious code in @ks-cqc/fingerprint-generator (npm)
osv ·
npm: @ks-cqc/fingerprint-generator
Malicious code in @client-web-next/footer (npm)
osv ·
npm: @client-web-next/footer
Malicious code in @egencia/design-tokens (npm)
osv ·
npm: @egencia/design-tokens
Malicious code in alelo-payment (npm)
osv · GHSA-4whx-hjpv-g8xf
npm: alelo-payment
Malicious code in bcc-design-icons (npm)
osv · GHSA-73q2-99qx-v576 · SNYK-JS-BCCDESIGNICONS-19003147
npm: bcc-design-icons
Malicious code in alelo-services (npm)
osv · GHSA-f9gp-j44v-7447
npm: alelo-services
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.