CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: opentofu-fips, gatekeeper-fips, licenseclassifier, newrelic-infrastructure-agent, crossplane-fips, kubernetes, sonobuoy-fips, flux-helm-controller-fips, cilium-fips, flux-operator-fips, aws-flb-firehose, scorecard, bento, telegraf, coredns, docker-compose-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: opentofu-fips, gatekeeper-fips, licenseclassifier, newrelic-infrastructure-agent, crossplane-fips, kubernetes, sonobuoy-fips, flux-helm-controller-fips, cilium-fips, flux-operator-fips, aws-flb-firehose, scorecard, bento, telegraf, coredns, docker-compose-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: opentofu-fips, nri-redis, php-fpmexporter, git-sync, rabbitmq-default-user-credential-updater, vertical-pod-autoscaler-fips, gatekeeper-fips, kubelet-csr-approver-fips, newrelic-infrastructure-agent, yace, agentbeat, kubernetes-dashboard-metrics-scraper,...

CVE-2024-34679

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...

EUVD-2025-117227

Malicious code in minor-fuchsia-crane npm...

MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b7680011fb13a9be52884b44764bc62e5c0373cbc7e9591336ccd7f18367eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98677

Malicious code in generalcranez3n npm...

EUVD-2025-102083

Malicious code in standardcranez3n npm...

EUVD-2025-96444

Malicious code in minorcranez3n npm...

EUVD-2025-105958

Malicious code in damagedcranez3n npm...

MAL-2025-119345 Malicious code in damaged_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12b475bee37ae4de2ae1eb124cf15d6d7a1b79c4c949437e393504c063286f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb53c195c65fad904345dc0bbe7167e6040eda738d7b08c3aa7e334541a530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74090

Malicious code in weakcraneindigo-38 npm...

Malicious code in possible_crane_aquamarine-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26bbaee920a59328aa2349da5206b107cbdfef48679df9e37b4c325528a9de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74455

Malicious code in minorcraneolive-12 npm...

EUVD-2025-74355

Malicious code in possiblecraneaquamarine-5 npm...

MAL-2025-112429 Malicious code in unknown_crane_turquoise-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c38720061c06a254d61b832504c32cf4286da27f126000bbf354efcb06865a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_crane-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d925934a165f69e2d8bfc990dc54974d1ac6784fabf5ff8454d08df17cf5527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77288

Malicious code in complicatedcrane-smiletea npm...