dependency-track

OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...

Supply-Chain

Seguridad en la Cadena de Suministro de Software Una serie completa de tres libros sobre seguridad en la cadena de suministro de software, que cubre amenazas, defensas y gobernanza. Este manuscrito de código abierto proporciona a profesionales de seguridad, desarrolladores y líderes...

Malicious code in @yane88/listary-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd784784bedda93c768e67f6604062febe7761cb1ff3b1fb2178ad075aef10d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in cloufcrxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb997ba2e8af58bd0d35d6e2cfb2264b4ae0132e071fc5b0e3e58f3326e37a9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackoo3m1u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9409725a0c60e28d487058cfed06d57101ed7eb4fdf031e19ad43e72f2597d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack0y4arx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0ee85099f27ca35f55b12120ad7980852aab16079399ddf94f3dec87c8deea The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackujfdgm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2410d34a77cd3d19e207d15edd8221ff5a49932ee4a6052fa30668b92e810b96 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack2cyinb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e160520778ca6e1c474aa74fb066efea18747c08d4efbafcc7ece8ae185f5b21 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

Malicious code in desmosmathwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccdafeec1f447c84fcca9f7f17e41c8e940b8bd65c9caf72b1bddbb2befdea4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

PT-2026-81260

Name of the Vulnerable Software and Affected Versions HCL Hive affected versions not specified Description HCL Hive is affected by weak software supply chain governance. This issue could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the applicatio...

CVE-2026-21753: Use of Unmaintained Third Party Components

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

MINI-Q664-F2C8-9R9X

Bulletin has no description...

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-aws-ssoadmin, kubernetes-replicator-fips, multicluster-controlplane-fips, crossplane-provider-aws-sfn-fips, crossplane-provider-aws-dataexchange, falcosidekick, kserve, rke2-runtime-fips, knative-operator, cortex-fips,...

Malicious code in thepackagethatworks_ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2026-4753 vulnerabilities

Vulnerabilities for packages: omni, gotrue-fips, rancher-agent, zitadel, mattermost-fips, omni-fips, teleport-operator-fips, gotrue, neuvector-fips, neuvector, dex-fips, mattermost, rancher, teleport, commercial-grafana, dex...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: apko, argo-cd, packer-fips, trivy-fips, flux-kustomize-controller-fips, pulumi-language-dotnet, flux-source-controller-fips, nemo, zot, flux-source-controller, kaniko-fips, gitsign, grype, argocd-image-updater, flux-kustomize-controller, src-fingerprint-fips,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: argo-cd, container-object-storage-interface, vault-benchmark, kubernetes-replicator-fips, kyverno-policy-reporter-plugins-trivy, kserve, knative-operator, cortex-fips, sigstore-scaffolding, gotenberg, libnvidia-container, kubescape-operator-fips, ops-agent,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: argo-cd, kubevela-fips, grafana-fips, trufflehog-fips, cg, kubescape-server, trivy, gitea, cloudbeat, chainctl, argo-workflows, k9s-fips, kubescape, xeol-fips, gitaly, zarf-fips, kubevela, kubescape-server-fips, dagger, snyk-cli, argo-events, guac, coder-fips, apko,...