Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

MAL-2026-5641 Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: tfsec, apko, pulumi, kubevela, zot, pulumi-kubernetes-operator, gomplate, kargo, zarf, flux-image-automation-controller, osv-scanner, gitea, gptscript, nfpm, rancher-fleet, gitaly, syft, gitlab-runner, argo-events, trivy-operator, skaffold, terragrunt, grype, k9s,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: tfsec, apko, pulumi, kubevela, zot, pulumi-kubernetes-operator, gomplate, kargo, zarf, flux-image-automation-controller, osv-scanner, gitea, gptscript, nfpm, rancher-fleet, gitaly, syft, gitlab-runner, argo-events, trivy-operator, skaffold, terragrunt, grype, k9s,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: tfsec, apko, pulumi, kubevela, zot, pulumi-kubernetes-operator, gomplate, kargo, zarf, flux-image-automation-controller, osv-scanner, gitea, gptscript, nfpm, rancher-fleet, gitaly, syft, gitlab-runner, argo-events, trivy-operator, skaffold, terragrunt, grype, k9s,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: tfsec, apko, pulumi, kubevela, zot, pulumi-kubernetes-operator, gomplate, kargo, zarf, flux-image-automation-controller, osv-scanner, gitea, gptscript, nfpm, rancher-fleet, gitaly, syft, gitlab-runner, argo-events, trivy-operator, skaffold, terragrunt, grype, k9s,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: grype-fips, scorecard, guac, teleport, zarf, flux-fips, trufflehog, xeol-fips, argo-events, gitea, gitlab-rails-ce-fips, gitsign, kubescape, grafana-alloy, grype, crossplane, argo-cd-fips, chainloop-cli-fips, cloudbeat, chainloop-cli, trivy-operator-fips, kaniko-fips...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: grype-fips, scorecard, guac, teleport, zarf, flux-fips, trufflehog, xeol-fips, argo-events, gitea, gitlab-rails-ce-fips, gitsign, kubescape, grafana-alloy, grype, crossplane, argo-cd-fips, chainloop-cli-fips, cloudbeat, chainloop-cli, trivy-operator-fips, kaniko-fips...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: argo-cd, atlantis, argo-rollouts, goreleaser, argo-events, kubernetes-event-exporter, kubewatch, kyverno-policy-reporter, bento...

GHSA-V8VW-GW5J-W7M6 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-RQV2-M695-F8J4 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-R48C-V28R-PF6V vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44430 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-95C3-6VVW-4MRQ vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44429 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44428 vulnerabilities

Vulnerabilities for packages: goreleaser...