Malicious code in rabbitmq-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fd48bd646ad6b2f173f479170d732395513c048f0c0f6148205c0e1d08f864 The package rabbitmq-sdk was found to contain malicious code...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, cluster-api-ipam-provider-in-cluster, terraform-provider-time, atlantis, temporal-server, kaniko, azure-ipam, minio-object-browser, falco-no-driver, yq, knative-client, crossplane-provider-aws-dynamodb, src-fingerprint, kubernetes-dns-node-cache,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, cluster-api-ipam-provider-in-cluster, terraform-provider-time, atlantis, temporal-server, kaniko, azure-ipam, minio-object-browser, falco-no-driver, yq, knative-client, crossplane-provider-aws-dynamodb, src-fingerprint, kubernetes-dns-node-cache,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, cluster-api-ipam-provider-in-cluster, terraform-provider-time, atlantis, temporal-server, kaniko, azure-ipam, minio-object-browser, falco-no-driver, mockgen, yq, knative-client, crossplane-provider-aws-dynamodb, src-fingerprint,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, cluster-api-ipam-provider-in-cluster, terraform-provider-time, atlantis, temporal-server, kaniko, azure-ipam, minio-object-browser, falco-no-driver, mockgen, yq, knative-client, crossplane-provider-aws-dynamodb, src-fingerprint,...

CLEANSTART-2026-CA79883 Security fixes for GHSA-6V2P-P943-PHR9, GHSA-C6GW-W398-HV78, GHSA-F6X5-JH6R-WRFV, GHSA-HCG3-P754-CR77, GHSA-J5W8-Q4QC-RX2X, GHSA-QXP5-GW88-XV66, GHSA-V778-237X-GJRC, GHSA-VVGC-356P-C3XW applied in versions: 1.15.0-r1

Multiple security vulnerabilities affect the rabbitmq-messaging-topology-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

Malicious Package

Overview @purecore/rabbitmq is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @purecore/rabbitmq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e503973dbf2c860017e4ea8118ddec5cd43a537c32eb8fca24ac544a86d8822 The package @purecore/rabbitmq was found to contain malicious code. Source: ghsa-malware...

MAL-2026-749 Malicious code in @purecore/rabbitmq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e503973dbf2c860017e4ea8118ddec5cd43a537c32eb8fca24ac544a86d8822 The package @purecore/rabbitmq was found to contain malicious code. Source: ghsa-malware...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, actions-runner-controller, cluster-api-ipam-provider-in-cluster, terraform-provider-time, openbao-k8s, kubo, extism, rabbitmq-cluster-operator, fluxcd-kustomize-mutating-webhook, kubernetes-csi-external-resizer, flux-image-automation-controller,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, cluster-api-ipam-provider-in-cluster, terraform-provider-time, fluxcd-kustomize-mutating-webhook, minio-object-browser, azure-ipam, mockgen, petname, src-fingerprint, aactl, crossplane-provider-aws-dynamodb, go-jsonnet, kubernetes-dns-node-cache,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, cluster-api-ipam-provider-in-cluster, terraform-provider-time, fluxcd-kustomize-mutating-webhook, minio-object-browser, azure-ipam, mockgen, petname, src-fingerprint, aactl, crossplane-provider-aws-dynamodb, go-jsonnet, kubernetes-dns-node-cache,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, actions-runner-controller, cluster-api-ipam-provider-in-cluster, terraform-provider-time, openbao-k8s, kubo, extism, rabbitmq-cluster-operator, fluxcd-kustomize-mutating-webhook, kubernetes-csi-external-resizer, flux-image-automation-controller,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, cluster-api-ipam-provider-in-cluster, terraform-provider-time, fluxcd-kustomize-mutating-webhook, minio-object-browser, azure-ipam, falco-no-driver, mockgen, petname, src-fingerprint, aactl, crossplane-provider-aws-dynamodb, go-jsonnet,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, actions-runner-controller, cluster-api-ipam-provider-in-cluster, terraform-provider-time, openbao-k8s, kubo, extism, rabbitmq-cluster-operator, fluxcd-kustomize-mutating-webhook, kubernetes-csi-external-resizer, flux-image-automation-controller,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, kube-oidc-proxy, cadvisor-fips, datadog-operator-fips, bank-vaults, container-object-storage-interface-fips, crossplane-provider-aws-firehose-fips, cloudnative-pg-fips, sftpgo-plugin-pubsub, amazon-vpc-cni-plugins-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, kube-oidc-proxy, cadvisor-fips, datadog-operator-fips, bank-vaults, container-object-storage-interface-fips, crossplane-provider-aws-firehose-fips, cloudnative-pg-fips, sftpgo-plugin-pubsub, amazon-vpc-cni-plugins-fips,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, kube-oidc-proxy, cadvisor-fips, tekton-pipelines, datadog-operator-fips, bank-vaults, container-object-storage-interface-fips, crossplane-provider-aws-firehose-fips, cloudnative-pg-fips, sftpgo-plugin-pubsub, amazon-vpc-cni-plugins-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, kube-oidc-proxy, cadvisor-fips, tekton-pipelines, datadog-operator-fips, bank-vaults, container-object-storage-interface-fips, crossplane-provider-aws-firehose-fips, cloudnative-pg-fips, sftpgo-plugin-pubsub, amazon-vpc-cni-plugins-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, kube-oidc-proxy, cadvisor-fips, tekton-pipelines, datadog-operator-fips, bank-vaults, container-object-storage-interface-fips, crossplane-provider-aws-firehose-fips, cloudnative-pg-fips, sftpgo-plugin-pubsub, amazon-vpc-cni-plugins-fips,...