150 matches found
Malicious code in sonic-kots-ja (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00e777f17a13148285f52dada784c5ea4baa150304cf219ef54142d511c9683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-jaufb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185059 Malicious code in sonic-kots-jaufajab (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e915719a8df4400def253efcfc08f058bfd1ac9093b10cf7f589e389001068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185055 Malicious code in sonic-kots-jaab (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dacad449794653a0b5a1fa80aea72047b558cceb5e827894de17bf5ef0bda21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185060 Malicious code in sonic-kots-jaufb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-fudvtyaja (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209a956565cd05e082c1ae72c36fad71b0a85ce836e108de971c5f7f53142dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-uybajb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf68180cde0d187cbd5ef0ab64b4f85a173835a916729eb23d3b4dbc58366bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-ujb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2e06bb85bd07fbb6845796e243586e907762d428952ee4bca8e9cf8a838c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-fudvitifayaja (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b2b0f61bf024128737dcbbe42e099d5be6e31d7ec8a43cf8316f8ef85b1114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-jab (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ceccb1ae753ee364dfbc705ca4d08f8da7d611142720a0f0c650b25596c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: grype, trivy, tflint, zot, wolfictl, trivy-operator, terraform, tfsec, kubescape, rancher-fleet, syft, snyk-cli, opentofu, terragrunt, k9s, conftest, kots, steampipe, xeol, zarf...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: grype, trivy, tflint, zot, wolfictl, trivy-operator, terraform, tfsec, kubescape, rancher-fleet, syft, snyk-cli, opentofu, terragrunt, k9s, conftest, kots, steampipe, xeol, zarf...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: terraform, grype-fips, xeol, conftest, steampipe, rancher-fleet-fips, conftest-fips, opentofu-fips, k9s-fips, tfsec, grype, kubescape, snyk-cli, trivy-operator, chainctl, k9s, trivy-operator-fips, xeol-fips, kots, trivy, zarf, grype-db, cloudbeat, syft-fips, syft, zo...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: terraform, grype-fips, xeol, conftest, steampipe, rancher-fleet-fips, conftest-fips, opentofu-fips, k9s-fips, tfsec, grype, kubescape, snyk-cli, trivy-operator, chainctl, k9s, trivy-operator-fips, xeol-fips, kots, trivy, zarf, grype-db, cloudbeat, syft-fips, syft, zo...
CVE-2025-53547 vulnerabilities
Vulnerabilities for packages: helm-docs, helm-push, trivy, rancher-helm, eksctl, cluster-api-helm-controller, pluto, chartmuseum, zot, envoy-gateway, tw, flux-helm-controller, cert-manager-cmctl, kargo, cilium-cli, rancher-fleet, linkerd2, helm-operator, k9s, kots, istio, zarf, k8sgpt,...
GHSA-557J-XG8C-Q2MM vulnerabilities
Vulnerabilities for packages: helm-docs, helm-push, trivy, rancher-helm, eksctl, cluster-api-helm-controller, pluto, chartmuseum, zot, envoy-gateway, tw, flux-helm-controller, cert-manager-cmctl, kargo, cilium-cli, rancher-fleet, linkerd2, helm-operator, k9s, kots, istio, zarf, k8sgpt,...
GHSA-FV92-FJC5-JJ9H vulnerabilities
Vulnerabilities for packages: hcloud, timestamp-authority, atlantis-fips, glab, argo-workflows-fips, kyverno, tfsec, trivy-operator, swagger, spire-server-fips, grafana-alloy-fips, spark-operator-fips, terraform-mcp-server, cloud-sql-proxy, wgcf, argo-workflows, kots, zarf, nerdctl,...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: grype, skaffold, docker-compose, helm-push, k3s, neuvector-scanner, melange, trivy, fuse-overlayfs-snapshotter, nerdctl, eksctl, cluster-api-helm-controller, newrelic-infrastructure-agent, chartmuseum, zot, ctop, envoy-gateway, opa, wolfictl, flux-helm-controller,...