Malicious code in alelo-utils (npm)
osv · GHSA-chg6-4g6x-82gw
npm: alelo-utils
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · GHSA-chg6-4g6x-82gw
npm: alelo-utils
osv · GHSA-v865-m9wp-5xhc
npm: alelo-client
osv · GHSA-5cfx-4hvj-jxm8
npm: apple-cktool-internal-api-v9
osv · GHSA-4w9c-fcxm-hf28
npm: alelo-common
osv ·
npm: rollup-packages-polyfill-core
osv ·
npm: @patternfly-4/react-tokens
osv ·
npm: @patternfly-4/react-table
osv ·
npm: ember-livereload-indicator
osv ·
npm: @patternfly-4/quickstarts
osv · GHSA-cqm2-3c85-97rm · GHSA-xp5g-jv74-3fxh · SNYK-JS-EASYENTRYLANDINGROUTES-18758923
npm: @easy-entry/landing-routes
osv · GHSA-h83v-q7wq-gvgf · SNYK-JS-FINVUHDFCSDK-18758934
npm: finvu-hdfc-sdk
osv · GHSA-mrw6-p6x7-7jj3 · GHSA-w7r5-8cmj-m893 · SNYK-JS-EXPRESSBUNKER-19161375
npm: express-bunker
osv · GHSA-6pqf-hp72-2v55 · GHSA-j9q7-mjw2-vvpr · SNYK-JS-SOURCEFLOWUKSOURCEFLOWTRACKER-18758931
npm: @sourceflow-uk/sourceflow-tracker
osv · GHSA-g46p-xrvj-f265 · GHSA-v26v-7c7g-w7gf · SNYK-JS-EASYENTRYOUTSIDEREGISTRATIONFOPNAVIGATOR-18758915
npm: @easy-entry/outside-registration-fop-navigator
osv · GHSA-8gjf-85f5-p24f · SNYK-JS-REACTEMITS-19268012
npm: react-emits
osv · GHSA-9pv9-393c-q5f8 · GHSA-j8mm-3hrj-6rwf · SNYK-JS-SHELLLANDINGROUTES-18758920
npm: @shell-landing/routes
osv · GHSA-9gwm-xrv4-c436 · GHSA-g9fq-cx25-24m4 · SNYK-JS-EASYENTRYROUTES-18758928
npm: @easy-entry/routes
osv · GHSA-96gg-hmjq-f55m · GHSA-j2c8-6hx3-7994 · SNYK-JS-TNADVERTISEMENT-19003450
npm: tn-advertisement
osv · GHSA-423v-5hgq-8rxh · GHSA-r2wq-c8cp-gp8h · SNYK-JS-OPENBANKINGCABINETPROVIDERS-18758922
npm: @open-banking/cabinet-providers
osv · GHSA-rw44-fjj4-3p2c · GHSA-xqcr-rgfp-6wv7
npm: afterpay-sdk-example-server
osv · GHSA-53jv-685j-pchq · GHSA-qmhh-w396-g2p9 · SNYK-JS-SHELLCABINETROUTES-18758918
npm: @shell-cabinet/routes
osv · GHSA-6ffq-phjp-69jj · GHSA-mx7q-w72x-jgrh · GHSA-p9jp-9h4v-vpgv · GHSA-qqcc-hmq5-37p5
npm: tailwindcss-form-components
osv · GHSA-6ffq-phjp-69jj · GHSA-mx7q-w72x-jgrh · GHSA-p9jp-9h4v-vpgv · GHSA-qqcc-hmq5-37p5
npm: lakk-analytics
osv · GHSA-6ffq-phjp-69jj · GHSA-mx7q-w72x-jgrh · GHSA-p9jp-9h4v-vpgv · GHSA-qqcc-hmq5-37p5
npm: chai-foundry
osv · GHSA-m7q2-jqhj-4f3q · GHSA-pp2c-4x5r-7h8j · SNYK-JS-QRCODESTYLINGTEMP-19161484
npm: qr-code-styling-temp
osv · GHSA-9hw3-p3rx-59cw · SNYK-JS-PINODEPLOY-19161357 · SNYK-JS-PINODEPLOY-3326422
npm: pino-deploy
osv · GHSA-6q3r-v92v-89p4 · GHSA-7qqp-m577-rp2w · SNYK-JS-CHAIASDEPLOYER-18609744
npm: chai-as-deployer
osv · GHSA-56wr-9mvj-77pf · GHSA-mx42-9xv4-vm87 · SNYK-JS-MCPSERVERNOTION-19161387
npm: mcp-server-notion
osv · GHSA-h2gh-rhc4-98p2
npm: whatsadmaidk
osv · GHSA-jcx5-6w99-v44p
npm: google-logging-utils-internal
osv · GHSA-f99h-9jhg-jrxw
npm: fastify-bundler
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.