Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694708 source statements · aliases may refer to the same vulnerabilityMalicious code in zip-mp3-a-lbum-do-wnload-new-67476-what-we-do-egj2h-bgfgzz (npm)
osv · GHSA-5vq6-24gc-9474
npm: zip-mp3-a-lbum-do-wnload-new-67476-what-we-do-egj2h-bgfgzz
Malicious code in mp3-file-zip-d-ownload-hearts-of-oak-7cyqu-oiygcz (npm)
osv · GHSA-9rgx-vjmv-2rr8
npm: mp3-file-zip-d-ownload-hearts-of-oak-7cyqu-oiygcz
Malicious code in new-al-bum-av-ailable-131000-eton-alive-qzngy-cjxczf (npm)
osv · GHSA-8vf2-p5m3-f6ff
npm: new-al-bum-av-ailable-131000-eton-alive-qzngy-cjxczf
Malicious code in mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz (npm)
osv · GHSA-5xq6-xmgv-f9hp
npm: mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz
Malicious code in mp3-file-zip-d-ownload-10759-grand-prix-ojzwj-auchhw (npm)
osv · GHSA-hrqg-x7j6-4rc5
npm: mp3-file-zip-d-ownload-10759-grand-prix-ojzwj-auchhw
Malicious code in new-al-bum-av-ailable-50924-satta-massagana-rje2z-lfxsfe (npm)
osv · GHSA-gfc9-m3g7-gvmm
npm: new-al-bum-av-ailable-50924-satta-massagana-rje2z-lfxsfe
Malicious code in mp3-do-wnload-file-to-day-d-nu951-cjkdsy (npm)
osv · GHSA-xjmp-ww5x-7wcw
npm: mp3-do-wnload-file-to-day-d-nu951-cjkdsy
Malicious code in new-al-bum-av-ailable-girls-can-tell-ccfoc-vmqodd (npm)
osv · GHSA-wrg2-gv9j-xm53
npm: new-al-bum-av-ailable-girls-can-tell-ccfoc-vmqodd
Malicious code in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio (npm)
osv · GHSA-prmr-rh6m-8g25
npm: mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio
Malicious code in mp3-file-zip-d-ownload-challengers-ym2l6-mkqhum (npm)
osv · GHSA-63jc-mc2p-j89r
npm: mp3-file-zip-d-ownload-challengers-ym2l6-mkqhum
Malicious code in mp3-file-zip-d-ownload-hypnotize-kpkk0-ygzaqq (npm)
osv · GHSA-2628-822j-cw22
npm: mp3-file-zip-d-ownload-hypnotize-kpkk0-ygzaqq
Malicious code in zip-mp3-a-lbum-do-wnload-new-392999-fantasy-island-wlvf4-bxyvtm (npm)
osv · GHSA-p682-2ggw-p89f
npm: zip-mp3-a-lbum-do-wnload-new-392999-fantasy-island-wlvf4-bxyvtm
Malicious code in down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg (npm)
osv · GHSA-27wx-99p6-c9v2
npm: down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg
Malicious code in down-lo-ad-now-zip-mp3-6140-the-ideal-crash-jysrl-jcdvdw (npm)
osv · GHSA-g3pf-jcwm-phxv
npm: down-lo-ad-now-zip-mp3-6140-the-ideal-crash-jysrl-jcdvdw
Malicious code in do-wnload-available-the-white-stripes-1-yywrn-pvfqxa (npm)
osv · GHSA-6p3p-4q94-3xrx
npm: do-wnload-available-the-white-stripes-1-yywrn-pvfqxa
Malicious code in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio (npm)
osv · GHSA-r42g-57f7-9v75
npm: down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio
Malicious code in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl (npm)
osv · GHSA-26h2-9v4m-39j8
npm: down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl
Malicious code in down-lo-ad-now-zip-mp3-12737-talking-book-grhl4-lwvpqw (npm)
osv · GHSA-8x6h-46vf-p5rh
npm: down-lo-ad-now-zip-mp3-12737-talking-book-grhl4-lwvpqw
Malicious code in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt (npm)
osv · GHSA-8895-xgp7-943q
npm: file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt
Malicious code in do-wnload-available-provincial-q7d0i-muzxoj (npm)
osv · GHSA-m8rp-58c7-4jwg
npm: do-wnload-available-provincial-q7d0i-muzxoj
Malicious code in avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye (npm)
osv · GHSA-rv7w-6g98-vrq8
npm: avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye
Malicious code in availab-le-alb-um-zip-2022-482703-broken-hearts-club-bhvqx-hxwudi (npm)
osv · GHSA-7937-69cp-7jmx
npm: availab-le-alb-um-zip-2022-482703-broken-hearts-club-bhvqx-hxwudi
Malicious code in a-lbum-do-wnload-avai-lable-file-36733-tchamantche-9uiic-rfzaip (npm)
osv · GHSA-j73j-gh8g-qv53
npm: a-lbum-do-wnload-avai-lable-file-36733-tchamantche-9uiic-rfzaip
Malicious code in avail-able-albu-m-down-load-almanac-tdedm-bajrnj (npm)
osv · GHSA-j6c8-8mr9-6rmv
npm: avail-able-albu-m-down-load-almanac-tdedm-bajrnj
Malicious code in do-wnload-available-2013-5195-ripley-pine-zoryg-cyvlnz (npm)
osv · GHSA-gh3h-vfpr-5gwh
npm: do-wnload-available-2013-5195-ripley-pine-zoryg-cyvlnz
Malicious code in a-lbum-do-wnload-avai-lable-file-2019-138062-i-need-a-new-war-pp6yu-vclmgu (npm)
osv · GHSA-fr5c-v53m-q6f8
npm: a-lbum-do-wnload-avai-lable-file-2019-138062-i-need-a-new-war-pp6yu-vclmgu
Malicious code in a-lbum-do-wnload-avai-lable-file-10635-about-to-choke-pzt0k-onnsvp (npm)
osv · GHSA-887p-fpcm-mqq6
npm: a-lbum-do-wnload-avai-lable-file-10635-about-to-choke-pzt0k-onnsvp
Malicious code in a-lbum-do-wnload-avai-lable-file-playing-the-angel-l9tng-nkbcwn (npm)
osv · GHSA-h7xv-6h6g-vf82
npm: a-lbum-do-wnload-avai-lable-file-playing-the-angel-l9tng-nkbcwn
Malicious code in ava-ilable-down-load-mp3-today-35981-saints-and-sinners-mv3po-fqndxw (npm)
osv · GHSA-35cx-7wcp-vq25
npm: ava-ilable-down-load-mp3-today-35981-saints-and-sinners-mv3po-fqndxw
Malicious code in a-vailable-al-bum-file-101379-communion-mt1lk-dvshll (npm)
osv · GHSA-gh6r-g5gq-9qm4
npm: a-vailable-al-bum-file-101379-communion-mt1lk-dvshll
Malicious code in ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh (npm)
osv · GHSA-9r93-qrfh-qjf4
npm: ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh
Malicious code in do-wnload-available-20999-ruff-ryders-first-lady-6wp8i-xhznkl (npm)
osv · GHSA-qg54-2rcj-mx8v
npm: do-wnload-available-20999-ruff-ryders-first-lady-6wp8i-xhznkl
Malicious code in availab-le-alb-um-zip-the-visitor-l1n8t-frzacy (npm)
osv · GHSA-6257-r5j5-jv52
npm: availab-le-alb-um-zip-the-visitor-l1n8t-frzacy
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.