capslock

Capslock is a capability analysis CLI for Go packages that informs users of which privileged operations a given package can access. This works by classifying the capabilities of Go packages by following transitive calls to privileged standard library operations. The recent increase in supply chai...

Malicious code in nwin64tls (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 72555231efbf126e61cb3aa59d3482bc7967af46898e46eb2b9b7f81af8cd40e Importing the module starts a loop that listens to key strokes and on every capslock press exfiltrates screenshot to a hardcoded location. --- Category:...

MAL-2026-2432 Malicious code in nwin64tls (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 72555231efbf126e61cb3aa59d3482bc7967af46898e46eb2b9b7f81af8cd40e Importing the module starts a loop that listens to key strokes and on every capslock press exfiltrates screenshot to a hardcoded location. --- Category:...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: chart-testing, cert-manager-cmctl, flyte, falcosidekick, kpt, go-tools, undock, bank-vaults, contour, oauth2-proxy, nfpm, dataplaneapi, q, spegel, wireguard-go, git-credential-oauth, kubeflow-katib, kyverno-policy-reporter-ui, mockgen, nri-prometheus, kubevela, chise...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age, cfssl,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: hello-world-golang, ghaudit, cert-manager-cmctl, docker-credential-gcr, kube-logging-operator-custom-runner, kwok, flyte, runc, tfsec, sigstore-scaffolding, kapp, falcosidekick, stern, terraform-provider-azuread, kpt, sonobuoy, pvc-autoresizer, age,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: mc-fips, gatekeeper, gatekeeper-fips, mongodb-k8s-operator-version-upgrade-post-start-hook-fips, pgwatch, velero-plugin-for-microsoft-azure-fips, timescaledb-parallel-copy, loki, prometheus-bind-exporter, fq, licenseclassifier, velero-plugin-for-csi-fips, gosu-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: mc-fips, gatekeeper, gatekeeper-fips, mongodb-k8s-operator-version-upgrade-post-start-hook-fips, pgwatch, velero-plugin-for-microsoft-azure-fips, timescaledb-parallel-copy, wazero, loki, prometheus-bind-exporter, fq, licenseclassifier, velero-plugin-for-csi-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: mc-fips, gatekeeper, gatekeeper-fips, mongodb-k8s-operator-version-upgrade-post-start-hook-fips, pgwatch, velero-plugin-for-microsoft-azure-fips, timescaledb-parallel-copy, wazero, loki, prometheus-bind-exporter, fq, licenseclassifier, velero-plugin-for-csi-fips,...