Malicious code in link-ursa-nova-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d6e84b842283cf109ff27c3aac47525e74f91b0b9e53ef219fb4ccfa1c59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-cypress-registry-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184be61838d74995e813d28e8d20ce09f8082497818008ecacd08fd16637920b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113565

Malicious code in fomalhaut-nova-celeste-farout npm...

EUVD-2025-116387

Malicious code in auth-atlas-oauth-nova npm...

EUVD-2025-124260

Malicious code in nova-lyra-io-draco npm...

EUVD-2025-115740

Malicious code in canopus-nova-dotenv-umbriel npm...

EUVD-2025-122934

Malicious code in quito-barnard-selenium-nova npm...

MAL-2025-145669 Malicious code in nova-spectron-impulse-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8476b6ac2431658758159daf4a5664be2e497b0c866561f3d28143c03d717c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, trillian, cortex, speedtest-go, harbor, cadvisor, kubernetes-replicator, cert-manager-webhook-pdns, vault-env, kube-logging-operator-custom-runner, neuvector-sigstore-interface, pombump, opentofu, swagger, gops, wav...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: extism, dfc, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: extism, dfc, gosu, docker-machine-driver-harvester, nri-prometheus, render-template, flyte, checksec, ghaudit, crossplane, stakater-reloader, mongodb-kubernetes-operator, s5cmd, policy-controller, prometheus-adapter, spark-operator, trillian, istio, speedtest-go,...