Malicious code in my-auto-follow (npm)
osv · GHSA-3vq8-fp27-44xm
npm: my-auto-follow
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · GHSA-3vq8-fp27-44xm
npm: my-auto-follow
osv · GHSA-8qfw-qm7w-8239
npm: @xrelly-stack/bails
osv · GHSA-7gvw-4c75-pc6p
npm: @kxa/xbails
osv ·
npm: @azure-growth/signup-ux-components
osv · GHSA-fwcp-q8x6-4fc2
npm: @xayz/baileys
osv · GHSA-3xpj-mfqg-v52m
npm: @an1mshnpmb9c84920/pipe-dns-m19t2
osv · GHSA-c2gc-jwcq-w8r3
npm: @chatest/baileys
osv ·
npm: @webapp-shared/login-vmok
osv · GHSA-cgq9-cff6-pf33
npm: @xatancchii/natabaileys
cve-program ·
https://wordpress.org/plugins: newsletters-lite
cve-program ·
https://wordpress.org/plugins: my-auctions-allegro-free-edition
cve-program ·
https://wordpress.org/plugins: invoicing
cve-program ·
https://wordpress.org/plugins: dxp-toolkit
cve-program ·
https://wordpress.org/plugins: dxp-toolkit
cve-program ·
https://wordpress.org/plugins: unlimited-elements-for-elementor
cve-program ·
https://wordpress.org/plugins: contact-form-by-supsystic
cve-program ·
https://wordpress.org/plugins: buddypress
cve-program ·
https://wordpress.org/plugins: redux-framework
cve-program ·
https://wordpress.org/plugins: accordions
cve-program ·
https://wordpress.org/plugins: gs-logo-slider
cve-program ·
https://wordpress.org/plugins: dokan-lite
cve-program ·
https://wordpress.org/plugins: phoenix-media-rename
cve-program ·
https://wordpress.org/plugins: filter-everything
cve-program ·
https://wordpress.org/plugins: advanced-ads-tracking
cve-program ·
https://wordpress.org/plugins: best-woocommerce-feed
cve-program ·
https://wordpress.org/plugins: the-post-grid
cve-program ·
https://crocoblock.com: jet-engine
cve-program ·
https://wordpress.org/plugins: ad-inserter
cve-program ·
https://wordpress.org/plugins: site-reviews
cve-program ·
https://wordpress.org/plugins: kali-forms
cve-program ·
https://wordpress.org/plugins: cozy-addons
cve-program ·
https://wordpress.org/plugins: video-gallery-block
cve-program ·
https://wordpress.org/plugins: wp-job-portal
cve-program ·
https://wordpress.org/plugins: kali-forms
cve-program ·
https://wordpress.org/plugins: simple-cloudflare-turnstile
cve-program ·
https://wordpress.org/plugins: pdf-poster
cve-program ·
https://wordpress.org/plugins: hivepress-claim-listings
cve-program ·
https://wordpress.org/plugins: import-users-from-csv-with-meta
cve-program ·
Vendor product: mongoose
cve-program ·
Vendor product: pipecat
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: ctags · https://access.redhat.com/downloads/content/package-browser/: rubygem-katello
cve-program ·
Vendor product: FileRise
cve-program ·
Vendor product: kin-openapi
cve-program ·
Vendor product: Lychee
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.