SUSE CVE-2026-1580

A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-method Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to t...

SUSE CVE-2026-22822

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.20.2 and prior to version 1.2.0, the getSecretKey template function, while introduced for senhasegura Devops Secrets Management DSM provider, ha...

SUSE CVE-2026-23742

Skipper is an HTTP router and reverse proxy for service composition. The default skipper configuration before 0.23.0 was -lua-sources=inline,file. The problem starts if untrusted users can create lua filters, because of -lua-sources=inline , for example through a Kubernetes Ingress resource. The...

Malicious code in web3-chain-sinon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d656a8031870a05e2b7fa8dec1f3f9b9b48c3d8de3d93df42c787c139b0693a5 The package web3-chain-sinon was found to contain malicious code. Source: ghsa-malware f522ddb6d36708e509e4e4074bed2658a3a1e4101d4a45bb588e08c611cc33...

MAL-2026-807 Malicious code in web3-sinon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6990443632c3224a5e897d1747fcd76f782eda8d020447076d59cf305b03c82 The package web3-sinon was found to contain malicious code. Source: ghsa-malware 7d195e4b1eda9212f69e313de4107deae82670a9615ec25b86c8aaaf3df0e1f9 Any...

MAL-2026-805 Malicious code in aligned-arrays (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bde941864059bf74245ed1ebf09a7be97e6a01881536ec8ad3913ddf1c1226f The package aligned-arrays was found to contain malicious code. Source: ghsa-malware 4bea95feabe1220983f2c46796cd72f198d1c4125771146d4a3a788f2fdb3b8a...

Malicious code in aligned-arrays (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bde941864059bf74245ed1ebf09a7be97e6a01881536ec8ad3913ddf1c1226f The package aligned-arrays was found to contain malicious code. Source: ghsa-malware 4bea95feabe1220983f2c46796cd72f198d1c4125771146d4a3a788f2fdb3b8a...

Malicious code in @rsgweb/rockstar-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd40e663999d2780e2e131fd5da090045d623032e6c51db70d0bd65cf583101d The package @rsgweb/rockstar-account was found to contain malicious code. Source: ghsa-malware...

Malicious code in @rdxportal/ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6715dad49a0781dc55e72ae77bd13276de1564d08cfd1c0a3c3aebf37b72acc The package @rdxportal/ui-components was found to contain malicious code. Source: ghsa-malware...

Malicious code in @sbseg-plugin/qbo-web-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f63d78f9aa713d6b2f068258ae34a81a6c8cfaa91890865506ce11475a44d5 The package @sbseg-plugin/qbo-web-app-ui was found to contain malicious code. Source: ghsa-malware...

Malicious code in @rsgweb/modules-core-www-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f1da0ba801a44eed5b3b909bc1630a6580ea6cd05677e6e0f4c1b2088d4e3b The package @rsgweb/modules-core-www-page was found to contain malicious code. Source: ghsa-malware...

MAL-2026-799 Malicious code in @rsgweb/rockstar-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd40e663999d2780e2e131fd5da090045d623032e6c51db70d0bd65cf583101d The package @rsgweb/rockstar-account was found to contain malicious code. Source: ghsa-malware...

Malicious code in @rsgweb/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9f14ff2b440c9d947019c65ffaa29df41116c3e35f18691cfcce733246790a The package @rsgweb/utils was found to contain malicious code. Source: ghsa-malware a9a98e6a12ac6be8573661e76ab7342baf0c83aae4d1907c482230dd5606dbc9...

MAL-2026-800 Malicious code in @rsgweb/tina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fedfc10f9721045fdfa303f918c63315e6863b5acb7f3d86443a03333e1994b The package @rsgweb/tina was found to contain malicious code. Source: ghsa-malware 4636b5e7c22aa34f9aea154f9b4ca825a51ed64947c6a0c2eab7203e24967a89 A...

MAL-2026-798 Malicious code in @rsgweb/modules-core-www-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f1da0ba801a44eed5b3b909bc1630a6580ea6cd05677e6e0f4c1b2088d4e3b The package @rsgweb/modules-core-www-page was found to contain malicious code. Source: ghsa-malware...

MAL-2026-796 Malicious code in @rdxportal/ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6715dad49a0781dc55e72ae77bd13276de1564d08cfd1c0a3c3aebf37b72acc The package @rdxportal/ui-components was found to contain malicious code. Source: ghsa-malware...

Malicious code in @rsgweb/modules-core-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c68d1fafad6a94ebe843e20901dd8e5251d0b27b963d07e71ecefbd16c7465 The package @rsgweb/modules-core-feedback was found to contain malicious code. Source: ghsa-malware...

MAL-2026-802 Malicious code in @sbseg-plugin/qbo-web-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f63d78f9aa713d6b2f068258ae34a81a6c8cfaa91890865506ce11475a44d5 The package @sbseg-plugin/qbo-web-app-ui was found to contain malicious code. Source: ghsa-malware...

Malicious code in @opposhop/nuxt-ssr-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0f25d8b1dc2ba6e9d88aed207e0f43239c33f2a39958e0bfc7d641c28c2ab5 The package @opposhop/nuxt-ssr-cache was found to contain malicious code. Source: ghsa-malware...

MAL-2026-795 Malicious code in @opposhop/nuxt-ssr-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0f25d8b1dc2ba6e9d88aed207e0f43239c33f2a39958e0bfc7d641c28c2ab5 The package @opposhop/nuxt-ssr-cache was found to contain malicious code. Source: ghsa-malware...