61724 matches found
Malicious code in transform-exponentiation-operator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b79481ce559cb600cfe4b2897847eb06d38b5cbe4ef456339cbbac7b240e60 The package transform-exponentiation-operator was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview transform-exponentiation-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
MAL-2026-665 Malicious code in transform-exponentiation-operator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b79481ce559cb600cfe4b2897847eb06d38b5cbe4ef456339cbbac7b240e60 The package transform-exponentiation-operator was found to contain malicious code. Source: ghsa-malware...
PT-2026-6506
External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function in github.com/external-secrets/external-secrets...
GO-2026-4351 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator
Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator...
CVE-2025-61728 vulnerabilities
Vulnerabilities for packages: steampipe, cosign, kine, flux-kustomize-controller, k8sgateway, ingress-nginx-controller, eksctl, dask-gateway, cert-manager-cmctl, minio, cilium-cli, kubernetes-dashboard, helm-operator, rancher-helm, telegraf, headlamp, spire-server, conftest, mc, nerdctl, hubble,...
GHSA-G9Q4-QJX4-2V7Q vulnerabilities
Vulnerabilities for packages: steampipe, cosign, kine, flux-kustomize-controller, k8sgateway, ingress-nginx-controller, eksctl, dask-gateway, cert-manager-cmctl, minio, cilium-cli, kubernetes-dashboard, helm-operator, rancher-helm, telegraf, headlamp, spire-server, conftest, mc, nerdctl, hubble,...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: mockgen, cfssl, docker-credential-ecr-login, kine, falcosidekick, protoc-gen-go-grpc, whereabouts, kubernetes-replicator, chisel, hubble, pguser, crossplane-provider-aws-cloudformation, runc, go-jsonnet, git-sync, harbor-registry, s5cmd, sftpgo-plugin-auth,...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: mockgen, cfssl, docker-credential-ecr-login, kine, falcosidekick, protoc-gen-go-grpc, whereabouts, kubernetes-replicator, chisel, hubble, pguser, crossplane-provider-aws-cloudformation, runc, go-jsonnet, git-sync, harbor-registry, s5cmd, sftpgo-plugin-auth,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: mockgen, cfssl, docker-credential-ecr-login, kine, falcosidekick, protoc-gen-go-grpc, whereabouts, kubernetes-replicator, chisel, hubble, pguser, crossplane-provider-aws-cloudformation, runc, go-jsonnet, git-sync, harbor-registry, s5cmd, sftpgo-plugin-auth,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: litestream, kine, docker-credential-ecr-login, falcosidekick, pgpool2exporter, bank-vaults, boring-registry, golangci-lint, mesosphere-vsphere-csi, db-operator, nri-jmx, whereabouts, gptscript, sriov-network-device-plugin, helm-operator, git-credential-oauth,...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: litestream, kine, docker-credential-ecr-login, falcosidekick, pgpool2exporter, bank-vaults, boring-registry, golangci-lint, mesosphere-vsphere-csi, db-operator, nri-jmx, whereabouts, gptscript, sriov-network-device-plugin, helm-operator, git-credential-oauth,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: litestream, cfssl, docker-credential-ecr-login, kine, falcosidekick, rabbitmq-default-user-credential-updater, pgpool2exporter, bank-vaults, boring-registry, golangci-lint, mesosphere-vsphere-csi, kube-logging-operator-custom-runner, db-operator, whereabouts,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: mockgen, cfssl, docker-credential-ecr-login, kine, falcosidekick, protoc-gen-go-grpc, whereabouts, kubernetes-replicator, chisel, hubble, pguser, crossplane-provider-aws-cloudformation, runc, go-jsonnet, git-sync, harbor-registry, s5cmd, sftpgo-plugin-auth,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: litestream, cfssl, docker-credential-ecr-login, kine, falcosidekick, rabbitmq-default-user-credential-updater, pgpool2exporter, bank-vaults, boring-registry, golangci-lint, mesosphere-vsphere-csi, kube-logging-operator-custom-runner, db-operator, whereabouts,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: kustomize-fips, linkerd2-cni-plugin, minc-fips, git-sync-fips, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-sns-fips, fleet-server, k3d, pushprox, terraform-provider-azapi-fips, gptscript, ceph-csi-operator, cerbos-fips, kube-logging-logging-operator...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: kustomize-fips, linkerd2-cni-plugin, minc-fips, git-sync-fips, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-sns-fips, fleet-server, k3d, pushprox, terraform-provider-azapi-fips, gptscript, ceph-csi-operator, cerbos-fips, kube-logging-logging-operator...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: kustomize-fips, minc-fips, git-sync-fips, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-sns-fips, fleet-server, k3d, pushprox, terraform-provider-azapi-fips, gptscript, ceph-csi-operator, cerbos-fips, kube-logging-logging-operator,...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: kustomize-fips, linkerd2-cni-plugin, minc-fips, git-sync-fips, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-sns-fips, fleet-server, k3d, pushprox, terraform-provider-azapi-fips, gptscript, sbom-scorecard, ceph-csi-operator, cerbos-fips,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: kustomize-fips, linkerd2-cni-plugin, minc-fips, git-sync-fips, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-sns-fips, fleet-server, k3d, pushprox, terraform-provider-azapi-fips, gptscript, sbom-scorecard, ceph-csi-operator, cerbos-fips,...