CVE-2026-80354

Apache Camel K suffers from an authorization bypass in custom resource resolution where a tenant can reference secrets by name in the operator namespace , potentially exposing secrets belonging to other tenants or operator components. The vulnerability stems from mavenProfiles ValueSources resolv...

Malicious code in amprem-activator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb73ef0a9130c0751f253465a40f102cddb6cecdec2835dd7cc9c0f4150efa1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

poc_CVE-2018-1002105

CVE-2018-1002105 PoC Authenticated PoC Demo Usage Unauthenticated PoC Demo Usage Authenticated PoC Proof-of-Concept exploit for CVE-2018-1002105. The current exploit requires create and get privileges on pods and pods/exec. Support has been added for portforward and attach, which require similar...

Malicious code in bmc-i18n-extract-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d52b44b46819aa61ff57d4863315b09f655a4fb5b5787843c2a24f85d9c6db The package's package.json declares a preinstall hook bun run index.js and lists the Bun runtime bun ^1.3.13 as a dependency, causing an obfuscated...

MAL-2026-15879 Malicious code in dsh-waste-market (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff08b82d3f992d5249efc4a0914c649542386b248af94f4aea510abc51dad0d5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15889 Malicious code in neighbor-key-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d780b9dd8236dfbb127579a5d58fac8423ea3992ce4900bf41abce906aae39 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15666 Malicious code in @yane88/workbuddy-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1067553b82d11f9e2a38c4d59dd3b450f722d5572fc8bb43765d5093f68cc23f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @yane88/workbuddy-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1067553b82d11f9e2a38c4d59dd3b450f722d5572fc8bb43765d5093f68cc23f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15586 Malicious code in originaldevelopmentstelemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60940a80ca72863b54a3cc8f1cc7da49be77b38e9111d4cb77cfc1417671f399 The package is advertised as a telemetry utility but its sole exported function, downloadAndRunClient, downloads updater.hta from...

EUVD-2026-63985

Incus has a project restriction bypass in instance copy across projects...

GHSA-C9F5-J9C3-MHRG Incus has a project restriction bypass in instance copy across projects

Summary Missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new project. This issue could allow an attacker to access secrets in instances they...

Malicious code in borsh-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed0e447cd98b9470a197c1dd9b341e6a93ea6f39088f4f93335979827f707b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackbndk47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348dc9c5c9f9b067e597312e0e8228c5bddb04ca7573801a6ae27ab9809cb520 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack1eognp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff722257765397d39ae1e9d1b93bc298de19ee2f1ace23154f41e3166f9227a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14740 Malicious code in 3layerdipstackelcuhp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb13b3a8a98b196d368a547d115510504e1a70d7d0235125cee48cc81dbef936 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackf0lda9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e45c2c4e36127ab79c8005d1b144d14e079b526400bbc027b4807f9bd0c8d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackykuowv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b35e713a652f02ee5277c5957f3c2ad5b48066dc7148986d88a5eb9d89d6ac The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackytruq6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e3fecbd60ba7e5b1b82e2824ba651ce8687eeb7855a47606ea4d57bbf03052 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstacklrswmw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc96980e2b702769f231bdd0187e0be95170fa11a8bef76ae5610f5446b34f8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack6jqkjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3282758727328d8477c022b3347d6a69f149c13a840749cbd71039d28b7aeeb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...