Malicious code in alelo-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7ed1d4017e58a9911a0cfee5d1cf8122a2ac28779a36fdf3ef74484f048748 [email protected] ships lifecycle scripts that harvest installer data and POST it to a hardcoded bare-IP endpoint 209.99.185.109 with TLS certificate...

MAL-2026-14028 Malicious code in alelo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1fd03e0ca4d5452b6a5d6aa2880a9c711021e287eaae056e68f70f6aedc926 On npm install, preinstall.js collects hostname, username, platform, cwd and the full process.env and POSTs the JSON body to...

Malicious code in alelo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1fd03e0ca4d5452b6a5d6aa2880a9c711021e287eaae056e68f70f6aedc926 On npm install, preinstall.js collects hostname, username, platform, cwd and the full process.env and POSTs the JSON body to...

MAL-2026-14025 Malicious code in alelo-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5aceecfb22fd66b4e0861399aa6864ba19a983f3483294dd0740e7e24d1c34 On npm install, preinstall.js collects hostname, username, platform, cwd, and the full process.env and POSTs the payload over HTTPS with TLS...

Malicious code in alelo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1e53c8bced61d4dfbd9121821219a5c35f2a7f273f06e9e2cfd628f509341f The package auto-executes exfiltration code during npm install via preinstall and postinstall lifecycle scripts. preinstall.js collects the hostname,...

MAL-2026-14023 Malicious code in alelo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1e53c8bced61d4dfbd9121821219a5c35f2a7f273f06e9e2cfd628f509341f The package auto-executes exfiltration code during npm install via preinstall and postinstall lifecycle scripts. preinstall.js collects the hostname,...

MAL-2026-14033 Malicious code in meualelo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fdf84c3f49f6d13b7ccbed745056f8bf03c4c7a2b814152962361ac07bd4191 The package's preinstall.js collects hostname, username, platform, cwd, and the full process.env, then POSTs the JSON payload over HTTPS with TLS...

Malicious code in alelo-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98bac664d9feb9d1d326fb6d724b9a62631267258ae81e69c5b4c0a057ba0f6 The package runs malicious lifecycle scripts on npm install. preinstall.js collects hostname, username, platform, cwd, and the entire process.env, th...

kubeshark v53.4.0

Network Observability for SREs & AI Agents Live Demo · Docs Kubeshark indexes cluster-wide network traffic at the kernel level using eBPF — delivering instant answers to any query using network, API, and Kubernetes semantics. What you can do: Download Retrospective PCAPs — cluster-wide packet...

GO-2026-5593 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips, sftpgo...

GO-2026-5575 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, commercial-kyverno, kyverno-notation-aws-fips, kyverno...

GO-2020-0005 vulnerabilities

Vulnerabilities for packages: etcd, etcd-fips, dgraph...

GO-2026-5289 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr-fips, cert-manager-istio-csr...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, step-fips, caddy, caddy-fips, step-issuer, step, step-ca, step-ca-fips...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: knative-serving-fips, ory-kratos-fips, kubo-fips, cg, keda, opa-fips, gitlab-workhorse-ce, grafana-beyla, fleet-server, grafana-mimir, prometheus-alertmanager, teleport, cerbos-fips, knative-kafka-broker-fips, envoy-gateway-fips, envoy-ratelimit-fips, kiali-fips,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: cg, flux-source-controller-fips, ratify, tekton-chains, skopeo-fips, ratify-fips, flux-source-controller, tekton-chains-fips, kyverno, kots, falcoctl-fips, tkn, kyverno-notation-aws, image-factory, kubescape, cosign-fips, kyverno-policy-reporter-plugins-kyverno-fips,...

GO-2025-3646 vulnerabilities

Vulnerabilities for packages: k3s...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step, caddy, step-issuer, step-ca...

GO-2026-5885 vulnerabilities

Vulnerabilities for packages: steampipe, cluster-api-helm-controller, manifest-tool, kots, oras, teleport, eksctl, chartmuseum, rancher, cert-manager-cmctl, cilium-cli, maru, k8ssandra-client, helm-operator, rancher-helm, linkerd2, helm-push, headlamp, conftest, kube-arangodb, falcoctl, ratify,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: chezmoi, crossplane-provider-aws-eks, cluster-api-azure-controller, gomplate, kine, tflint, rancher, kaf, k8sgpt, skaffold, gptscript, zot, crossplane-provider-aws-firehose, spire-server, prometheus-operator, cert-manager, chisel, nerdctl, opentelemetry-collector,...