Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-m (npm)

The package @zalastax/nolb-hyperfunfluentui-emoji-m was found to contain malicious code...

MAL-2025-10096 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-p- (npm)

The package @zalastax/nolb-hyperfunfluentui-emoji-p- was found to contain malicious code...

Cross-site Scripting (XSS)

Overview @fluentui/react-charting is a React web charting controls for Microsoft fluentui system. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the unsecured SVG attribute spreading in the CartesianChart, Legend Shape renderer, and LineChart event annotation...

MAL-2025-1556 Malicious code in fluentui-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a946d5d0851f29bedadf8857d3b954ecf93da7aaa8b01cc198063141c739169d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fluentui-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a946d5d0851f29bedadf8857d3b954ecf93da7aaa8b01cc198063141c739169d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Prototype Pollution

Overview @fluentui/styles is a set of styling utilities for CSS-in-JS. Affected versions of this package are vulnerable to Prototype Pollution. The deepmerge function available within the styles package of FluentUI allows one object to merge with another recursively. Given a value such as proto,...

@fluentui/local-sandbox (>=0.31.1-alpha.6224, <=0.45.0), @fluentui/react (>=0.31.1-alpha.6224, <=0.46.0) +6 more potentially affected by unknown CVE via @fluentui/styles (>=0.31.1-alpha.6224, <=0.49.0)

@fluentui/styles NPM version =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.47.6, =0.47.0, =0.47.4, =0.1.0, =2.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-FLUENTUISTYLES-570808...