Malicious code in @bellaxchuu/xtrxbails (npm)
osv · GHSA-5f6x-qj83-2895
npm: @bellaxchuu/xtrxbails
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · GHSA-5f6x-qj83-2895
npm: @bellaxchuu/xtrxbails
osv · GHSA-4gc8-pmgh-hx47
npm: @bellaxchuu/flowblue
osv · GHSA-862w-53p5-jcpx
npm: @bellaxchuu/crystalred
osv · GHSA-jgwg-m26g-j9c2
npm: @bellaxchuu/familyxtrx
osv · GHSA-5x7v-4r7v-353c
npm: @bellaxchuu/skyblue
osv · GHSA-46rh-wx96-cw47
npm: @bellaxchuu/privatebails
osv · GHSA-mwq7-c4ww-fpfq
npm: @bellaxchuu/xbails
osv · GHSA-3x55-8979-2xhq
npm: @bellaxchuu/libsignal-node
osv · GHSA-pxp7-vhfv-j52j
npm: @bellaxchuu/bails
osv · GHSA-mff5-fqw5-7vhj
npm: @bellaxchuu/yarnbails
cve-program ·
https://repo.maven.apache.org/maven2: org.postgresql:postgresql
cve-program ·
Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0
cve-program ·
Vendor product: DataPower Gateway 10.6.0
cve-program ·
Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0
cve-program ·
Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0
cve-program ·
Vendor product: Stump
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: Aurora Heatmap
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: Bricksforge
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: @fastify/jwt
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
https://wordpress.org/plugins: give
cve-program ·
Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0
cve-program ·
https://wordpress.org/plugins: shortpixel-image-optimiser
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: redhat-ds:11 · https://access.redhat.com/downloads/content/package-browser/: redhat-ds:11 · https://access.redhat.com/downloads/content/package-browser/: redhat-ds:11
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: AKINSOFT WOLVOX Control Panel
cve-program ·
Vendor product: MyRezzta
cve-program ·
https://wordpress.org/plugins: wpcomplete
cve-program ·
https://wordpress.org/plugins: wp-2fa
cve-program ·
https://github.com/DCMTK/dcmtk: DCMTK
cve-program ·
https://github.com/DCMTK/dcmtk: DCMTK
cve-program ·
https://wordpress.org/plugins: robo-gallery
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.