Wiz Becomes Fastest Security ISV to Reach $1 Billion in AWS Marketplace Lifetime Sales

A milestone fueled by customer trust and a partnership built for scale...

BIT-HUBBLE-RELAY-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

BIT-CILIUM-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

GHSA-G7RM-8PW5-WVG2 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp...

Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Impact CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network interface may unintentionally allow broader outbound access than intended by the policy authors. In such cases, the toCIDRset sectio...

GHSA-38PP-6GCP-RQVM Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Impact CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network interface may unintentionally allow broader outbound access than intended by the policy authors. In such cases, the toCIDRset sectio...

Malicious code in kubebuilder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456a881366168d4fa499da92a8d4a0ea76d3ebea8279b0db3a27ce5b1a7d2d47 The package kubebuilder was found to contain malicious code...

Malicious code in terrain-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46a95eed8525e8cdfd89c0a6f5d70bf605dfc51e11d76242197511495fdce20 The package terrain-sample was found to contain malicious code...

Malicious code in usb_dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ce4856d261f76ac398ea5cc8fca540f9d0513d1063a64d3f1c49d028895872 The package usbdev was found to contain malicious code...

Malicious code in mongodb-compass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc0d8ae5a118b95da082deba58530df3356140503ebc3590069cc6ef8c6bc4d The package mongodb-compass was found to contain malicious code...

Malicious code in silentcipherui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b78948a66f16eeb0cbe53a1285d2c02a70efb69a1185aae00bd053e2059ac4c The package silentcipherui was found to contain malicious code...

Malicious code in render-stage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c65b8147f7b040c89bba386febb3dbbfe85d6f5e9c14fa261e67de9bc558587 The package render-stage was found to contain malicious code...

MAL-2025-191515 Malicious code in leafygreen-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f7fae370136d1686b52bfce441170148b5370d9bc737f0426895d826f2933e The package leafygreen-docs was found to contain malicious code...

MAL-2025-191526 Malicious code in silentcipherui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b78948a66f16eeb0cbe53a1285d2c02a70efb69a1185aae00bd053e2059ac4c The package silentcipherui was found to contain malicious code...

MAL-2025-191505 Malicious code in angular-promql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34c3150aabe5f7147486dac3ab4fd22d906f4ec0d8f4f7d39b1c9f2137ebaaf The package angular-promql was found to contain malicious code...

MAL-2025-191523 Malicious code in privy-frames-v2-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50804c5abc715a96e6683f67c970ed8e06d949cce42d57ac7d8754c9633ad685 The package privy-frames-v2-demo was found to contain malicious code...

MAL-2025-191510 Malicious code in hpi-porsche-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89589737b4001caa57e131f557999bed39bd5bdc13de932d5988f194508cfc7b The package hpi-porsche-app was found to contain malicious code...

MAL-2025-191529 Malicious code in terrain-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46a95eed8525e8cdfd89c0a6f5d70bf605dfc51e11d76242197511495fdce20 The package terrain-sample was found to contain malicious code...

MAL-2025-191524 Malicious code in render-stage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c65b8147f7b040c89bba386febb3dbbfe85d6f5e9c14fa261e67de9bc558587 The package render-stage was found to contain malicious code...

MAL-2025-191516 Malicious code in markdownlint-cli2-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655d6053e439a95c848bd57cd41cba21de94f230903346b885b527082e131915 The package markdownlint-cli2-action was found to contain malicious code...