Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

MAL-2026-5641 Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: flux, guac, bom, teleport, pulumi-language-dotnet, pulumi-kubernetes-operator, k9s, argocd-image-updater, goreleaser, argo-cd, scorecard, syft, zarf, tfsec, trivy-operator, external-secrets-operator, skaffold, trivy, flux-image-automation-controller, grafana-alloy,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: flux, guac, bom, teleport, pulumi-language-dotnet, pulumi-kubernetes-operator, k9s, argocd-image-updater, goreleaser, argo-cd, scorecard, syft, zarf, tfsec, trivy-operator, external-secrets-operator, skaffold, trivy, flux-image-automation-controller, grafana-alloy,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: flux, guac, bom, teleport, pulumi-language-dotnet, pulumi-kubernetes-operator, k9s, argocd-image-updater, goreleaser, argo-cd, scorecard, syft, zarf, tfsec, trivy-operator, external-secrets-operator, skaffold, trivy, flux-image-automation-controller, grafana-alloy,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: flux, guac, bom, teleport, pulumi-language-dotnet, pulumi-kubernetes-operator, k9s, argocd-image-updater, goreleaser, argo-cd, scorecard, syft, zarf, tfsec, trivy-operator, external-secrets-operator, skaffold, trivy, flux-image-automation-controller, grafana-alloy,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: coder-fips, tfsec, gitlab-runner-fips, packer, zarf-fips, argo-events-fips, mapotf-fips, argo-cd, gptscript, melange, terragrunt, chainctl-fips, cerbos, grype-fips, pulumi-kubernetes-operator, k9s, argo-workflows, argocd-image-updater, argocd-image-updater-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: coder-fips, tfsec, gitlab-runner-fips, packer, zarf-fips, argo-events-fips, mapotf-fips, argo-cd, gptscript, melange, terragrunt, chainctl-fips, cerbos, grype-fips, pulumi-kubernetes-operator, k9s, argo-workflows, argocd-image-updater, argocd-image-updater-fips,...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: kubewatch, kubernetes-event-exporter, goreleaser, argo-cd, bento, atlantis, argo-rollouts, argo-events, kyverno-policy-reporter...

GHSA-V8VW-GW5J-W7M6 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-RQV2-M695-F8J4 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-R48C-V28R-PF6V vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44430 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-95C3-6VVW-4MRQ vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44429 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44428 vulnerabilities

Vulnerabilities for packages: goreleaser...