Malicious code in bazelisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bcbd35130e716d1a2940c91b6691d41b9655fdc8587404af37bc6e5a7f1370 This npm package uses the name bazelisk, colliding with Google's bazelbuild/bazelisk project referenced in the tarball's source.txt, and self-labels ...

GHSA-5VJQ-5JMG-39XQ Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers, when using lockFileMaintenance

When using lockFileMaintenance using the bazel-module or bazelisk managers between Renovate 43.65.0 2026-03-12 and 43.102.11 2026-04-02, there was the opportunity for remote code execution from a malicious dependency, if the Bazel module executes code that relies on a dependency. As this is an...

Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers, when using lockFileMaintenance

When using lockFileMaintenance using the bazel-module or bazelisk managers between Renovate 43.65.0 2026-03-12 and 43.102.11 2026-04-02, there was the opportunity for remote code execution from a malicious dependency, if the Bazel module executes code that relies on a dependency. As this is an...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: timoni, nri-couchbase, vault-env, harbor-scanner-trivy, http-echo, manifest-tool, chezmoi, mods, caddy, wuzz, supercronic, mc, verticadb-operator, gobuster, nri-mongodb, rancher, vault-benchmark, k8sgpt-operator, knative-eventing, terraform-provider-aws,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: timoni, nri-couchbase, helm, lazygit, oras, scorecard, task, http-echo, metrics-server, wire-go, src, runc, nri-kafka, volume-modifier-for-k8s, pulumi, yq, caddy, minio, crossplane-provider-azure, velero, vt-cli, dynamic-localpv-provisioner, ip-masq-agent,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: timoni, nri-couchbase, helm, lazygit, oras, scorecard, task, http-echo, metrics-server, wire-go, src, runc, nri-kafka, volume-modifier-for-k8s, pulumi, yq, caddy, minio, crossplane-provider-azure, velero, vt-cli, dynamic-localpv-provisioner, ip-masq-agent,...