MAL-2026-5641 Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gomplate, tfsec, kyverno, rancher-fleet, crossplane, k9s, osv-scanner, guac, gitea, argo-cd, witness, wolfictl, nuclei, steampipe, kargo, apko, pulumi-kubernetes-operator, pulumi-language-dotnet, argocd-image-updater, gptscript, argo-events, cerbos, dagger, gitaly,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gomplate, tfsec, kyverno, rancher-fleet, crossplane, k9s, osv-scanner, guac, gitea, argo-cd, witness, wolfictl, nuclei, steampipe, kargo, apko, pulumi-kubernetes-operator, pulumi-language-dotnet, argocd-image-updater, gptscript, argo-events, cerbos, dagger, gitaly,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gomplate, tfsec, kyverno, rancher-fleet, crossplane, k9s, osv-scanner, guac, gitea, argo-cd, witness, wolfictl, nuclei, steampipe, kargo, apko, pulumi-kubernetes-operator, pulumi-language-dotnet, argocd-image-updater, gptscript, argo-events, cerbos, dagger, gitaly,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: gomplate, tfsec, kyverno, rancher-fleet, crossplane, k9s, osv-scanner, guac, gitea, argo-cd, witness, wolfictl, nuclei, steampipe, kargo, apko, pulumi-kubernetes-operator, pulumi-language-dotnet, argocd-image-updater, gptscript, argo-events, cerbos, dagger, gitaly,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: kots, kargo, melange, chainloop-cli, cerbos-fips, gitea-fips, k9s-fips, grafana-alloy-fips, wolfictl, scorecard, osv-scanner, syft, crossplane-fips, gitlab-runner-fips, kaniko-fips, gitea, argocd-image-updater, goreleaser, k9s, teleport, chainctl-fips, bom, trivy-fip...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: kots, kargo, melange, chainloop-cli, cerbos-fips, gitea-fips, k9s-fips, grafana-alloy-fips, wolfictl, scorecard, osv-scanner, syft, crossplane-fips, gitlab-runner-fips, kaniko-fips, gitea, argocd-image-updater, goreleaser, k9s, teleport, chainctl-fips, bom, trivy-fip...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: atlantis, kubewatch, kubernetes-event-exporter, argo-cd, goreleaser, argo-rollouts, kyverno-policy-reporter, argo-events, bento...

GHSA-RQV2-M695-F8J4 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44430 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-95C3-6VVW-4MRQ vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44429 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44428 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-V8VW-GW5J-W7M6 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-R48C-V28R-PF6V vulnerabilities

Vulnerabilities for packages: goreleaser...