MAL-2026-5641 Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trufflehog, snyk-cli, kubevela, goreleaser, nfpm, crossplane, gitea, steampipe, flux-image-automation-controller, tfsec, argocd-image-updater, cerbos, gomplate, melange, grafana-alloy, pulumi-kubernetes-operator, rancher-fleet, trivy, src-fingerprint, argo-cd, grype,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: trufflehog, snyk-cli, kubevela, goreleaser, nfpm, crossplane, gitea, steampipe, flux-image-automation-controller, tfsec, argocd-image-updater, cerbos, gomplate, melange, grafana-alloy, pulumi-kubernetes-operator, rancher-fleet, trivy, src-fingerprint, argo-cd, grype,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: trufflehog, snyk-cli, kubevela, goreleaser, nfpm, crossplane, gitea, steampipe, flux-image-automation-controller, tfsec, argocd-image-updater, cerbos, gomplate, melange, grafana-alloy, pulumi-kubernetes-operator, rancher-fleet, trivy, src-fingerprint, argo-cd, grype,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: trufflehog, snyk-cli, kubevela, goreleaser, nfpm, crossplane, gitea, steampipe, flux-image-automation-controller, tfsec, argocd-image-updater, cerbos, gomplate, melange, grafana-alloy, pulumi-kubernetes-operator, rancher-fleet, trivy, src-fingerprint, argo-cd, grype,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitaly-fips, gitlab-rails-ce, cerbos-fips, kyverno, nemo, kaniko-fips, teleport, cloudbeat-fips, cg, guac, tfsec, apko-fips, argo-cd-fips, chainloop-cli-fips, argocd-image-updater-fips, mapotf, external-secrets-operator, snyk-cli, packer-fips, trivy, bom, gomplate,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitaly-fips, gitlab-rails-ce, cerbos-fips, kyverno, nemo, kaniko-fips, teleport, cloudbeat-fips, cg, guac, tfsec, apko-fips, argo-cd-fips, chainloop-cli-fips, argocd-image-updater-fips, mapotf, external-secrets-operator, snyk-cli, packer-fips, trivy, bom, gomplate,...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: bento, goreleaser, argo-cd, kubernetes-event-exporter, argo-rollouts, argo-events, kubewatch, atlantis, kyverno-policy-reporter...

CVE-2026-44429 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44427 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44428 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-V8VW-GW5J-W7M6 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-RQV2-M695-F8J4 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-R48C-V28R-PF6V vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-95C3-6VVW-4MRQ vulnerabilities

Vulnerabilities for packages: goreleaser...