MAL-2026-792 Malicious code in @meli-lint/eslint-config-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f8e866ee1edded4e092e1ece0dac9fae771a6870cc053bcfe711d56d77b1e4 The package @meli-lint/eslint-config-base was found to contain malicious code. Source: ghsa-malware...

MAL-2026-793 Malicious code in @meli-lint/eslint-config-base-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4086f80598ff1b89ade2e3e2efb54b1a60f19cdc764415d7d52738252eb98f77 The package @meli-lint/eslint-config-base-ts was found to contain malicious code. Source: ghsa-malware...

Malicious code in @meli-lint/eslint-config-base-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4086f80598ff1b89ade2e3e2efb54b1a60f19cdc764415d7d52738252eb98f77 The package @meli-lint/eslint-config-base-ts was found to contain malicious code. Source: ghsa-malware...

MAL-2026-791 Malicious code in @hashicorp-internal/vault-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e2c508de22734977cac24ec430b5cfece85e6367f577df76caa740b5594eb7 The package @hashicorp-internal/vault-reporting was found to contain malicious code. Source: ghsa-malware...

MAL-2026-794 Malicious code in @meli-lint/eslint-config-tests-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132488198f2cf5f0c73a4f6dd4d766162d9ef2bae156055d07c84b60e3e7b26d The package @meli-lint/eslint-config-tests-jest was found to contain malicious code. Source: ghsa-malware...

Malicious code in @hashicorp-internal/vault-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e2c508de22734977cac24ec430b5cfece85e6367f577df76caa740b5594eb7 The package @hashicorp-internal/vault-reporting was found to contain malicious code. Source: ghsa-malware...

Malicious code in syf-typings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb43a4c463e5215767c2b81094bce1ced474c522ed212471d7ac62ff11d01a4 The package syf-typings was found to contain malicious code. Source: ghsa-malware 87d96242197900f3c78c05f4482747392edaee32046239b89a056617aa109c9d An...

MAL-2026-789 Malicious code in syf-typings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb43a4c463e5215767c2b81094bce1ced474c522ed212471d7ac62ff11d01a4 The package syf-typings was found to contain malicious code. Source: ghsa-malware 87d96242197900f3c78c05f4482747392edaee32046239b89a056617aa109c9d An...

CVE-2025-15566

A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-proxy-set-headers Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

CVE-2025-15566 ingress-nginx auth-proxy-set-headers nginx configuration injection

A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-proxy-set-headers Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

CVE-2025-15566

A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-proxy-set-headers Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

CVE-2025-15566

CVE-2025-15566 affects ingress-nginx via the auth-proxy-set-headers annotation that can inject configuration into nginx, enabling arbitrary code execution in the ingress-nginx controller and disclosure of Secrets accessible cluster-wide. Connected sources confirm the vulnerability lies in the ann...

PT-2026-6670

Name of the Vulnerable Software and Affected Versions ingress-nginx affected versions not specified Description A security issue exists in ingress-nginx where the nginx.ingress.kubernetes.io/auth-proxy-set-headers Ingress annotation can be used to inject configuration into nginx. This can result ...

CVE-2026-22549

A vulnerability exists in F5 BIG-IP Container Ingress Services that may allow excessive permissions to read cluster secrets. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Malicious code in debug-logger-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d31caf4d90f11bf1428172dce6844e28db1dff1aead31c396b1cc6b0e0462d7 The package debug-logger-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in 0xhash-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6533d0ccd6be4affddc7247e6f5e925ac35fbe47d877eb2cc0ace6e493acc497 The package 0xhash-utils was found to contain malicious code. Source: ghsa-malware df192d86e51f442508e66c54064ef3c8d9c2cbe92133f87a522bc968dc4f6f45 A...

MAL-2026-767 Malicious code in 0xhash-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6533d0ccd6be4affddc7247e6f5e925ac35fbe47d877eb2cc0ace6e493acc497 The package 0xhash-utils was found to contain malicious code. Source: ghsa-malware df192d86e51f442508e66c54064ef3c8d9c2cbe92133f87a522bc968dc4f6f45 A...

Malicious code in https-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36dcc502283d554435cbf1426fd49634a8889c0839134cb84847739226aee3b The package https-servers was found to contain malicious code. Source: ghsa-malware 36ca75a183037ab06a63d3ba308f3fe6f3207772c7b77df966768e3f10e15c00...

MAL-2026-769 Malicious code in https-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36dcc502283d554435cbf1426fd49634a8889c0839134cb84847739226aee3b The package https-servers was found to contain malicious code. Source: ghsa-malware 36ca75a183037ab06a63d3ba308f3fe6f3207772c7b77df966768e3f10e15c00...

Malicious code in optimizer-cpu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d9a5679e6f23c70908ce2670edfdec83e685bcab26cddb979e034b158c4748 The package optimizer-cpu was found to contain malicious code. Source: ghsa-malware 47b72b719d340d2e4a2610cd788db370ee5df468243efd141e446a1a1c140bf4...