Malicious code in @an1mshnpmb9c84920/oidc-cross-cafb9d929e (npm)
osv · GHSA-mmr7-9m67-9qh5
npm: @an1mshnpmb9c84920/oidc-cross-cafb9d929e
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · GHSA-mmr7-9m67-9qh5
npm: @an1mshnpmb9c84920/oidc-cross-cafb9d929e
osv · GHSA-fhh5-55p8-29hj
npm: @pkgship/frpc-darwin-amd64
osv · GHSA-4p22-gg56-8457
npm: @ppa-web-components/ppa-hotel-collection
osv · GHSA-p7p5-jrq5-q47x
npm: @decoopus/claude-setup
osv · GHSA-r9qx-xcg2-7wcc
npm: 6161test1234
osv · GHSA-fv2r-964m-pc2m
npm: @seggy116/next-diff
osv · GHSA-ffq4-h5jm-8pqr
npm: @zaip-ai/cli
osv · GHSA-c2qc-c78r-386v
npm: @capsense/core-ui
osv · GHSA-r77r-rw3m-rjh5
npm: adyen-web-v6
osv · GHSA-cj9w-7h22-q93g
npm: api-anthropic
osv ·
npm: @testsecuiitytestme/cache-helper
osv · GHSA-fwfc-f4gp-qrcq
npm: zeroz-baileys
osv ·
npm: signalledger-diagnostics
osv · GHSA-w84w-rhx7-2f7g
npm: x402-prompt-injection-scan
osv · GHSA-j4h8-xxcj-28g7
npm: vjkpwjxbvndelta
osv · GHSA-39p9-96vf-fxjh
npm: @eforms/forms-api
osv · GHSA-xvgg-qjjh-gq34
npm: @tekmidian/pai
osv · GHSA-wmfr-2pvv-wmf3
npm: @tableau__catalog-messages/database_lower
osv · GHSA-pmg6-2w6r-4q4h
npm: @liauto/darwin-x64
osv · GHSA-4632-2g34-4r9w
npm: @decoopus/chatgpt-setup
osv · GHSA-32x9-4g9x-5cxj
npm: @liauto/win32-x64
osv · GHSA-qh6w-wgpq-j344
npm: @yudzxml/baileys
osv · GHSA-9fhg-r3w6-g7r4
npm: @k18k/entrypoint-sdk-linux-x64
osv · GHSA-h6v3-2957-9j3g
npm: @greenlake/auth
osv · GHSA-8mqm-233x-2g2j
npm: @lumen-labs-dev/whisper-node
osv · GHSA-4f5p-mp5p-863f
npm: @worrisome/reutil
osv · GHSA-7345-fjw8-x55w
npm: @alannxd/baileys
osv · GHSA-2w7v-jwxh-w7wc
npm: @camera.ui/camera-ui-nvr-windows-amd64
osv · GHSA-p3hf-95qq-mv56
npm: @ppa-web-components/ppa-headerfooter
osv · GHSA-8wf7-8825-99q7
npm: @k18k/entrypoint-sdk-darwin-arm64
osv · GHSA-87gv-mmww-whrr
npm: @an1mshnpmb9c84920/gat-scope-target-125ec19a
osv · GHSA-x55v-jc52-q424
npm: @pkgship/frps-linux-amd64
osv · GHSA-phgq-4c2g-6xpx
npm: @capsense/ccx-welcome-page
osv · GHSA-938p-x8vr-2r33
npm: @drone-js-ext/core
osv · GHSA-j83w-xhgf-7m58
npm: @iobandamwer/cache-helper
osv · GHSA-753f-gx8g-q88w
npm: @pkgship/frpc-linux-arm64
cve-program ·
Vendor product: twisted
cve-program ·
Vendor product: zulip
cve-program ·
Vendor product: twisted
cve-program ·
Vendor product: rabbitmq-server
cve-program ·
Vendor product: F6
cve-program ·
Vendor product: pypdf
cve-program ·
Vendor product: HBS 3 Hybrid Backup Sync · Vendor product: Hybrid Backup Sync
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.