GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: cloudflared-fips, gitlab-rails-ce, rancher-agent, newrelic-infrastructure-agent, elastic-agent, apko-fips, argo-cd-fips, eksctl, traefik-fips, qemu-guesthelper, tigera-operator-fips, buildah-fips, kubernetes, wal-g, podman-fips, amazon-ssm-agent-fips, chartmuseum,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, gitlab-rails-ce, rancher-agent, newrelic-infrastructure-agent, elastic-agent, apko-fips, argo-cd-fips, eksctl, traefik-fips, qemu-guesthelper, tigera-operator-fips, buildah-fips, kubernetes, wal-g, podman-fips, amazon-ssm-agent-fips, chartmuseum,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: supercronic, direnv, cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, hugo, json-exporter-fips, jitsucom-bulker, karma-fips, aws-nuke-fips, memcached-exporter-fips, rancher-agent,...

CVE-2024-34679

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...

EUVD-2025-117227

Malicious code in minor-fuchsia-crane npm...

MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b7680011fb13a9be52884b44764bc62e5c0373cbc7e9591336ccd7f18367eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102083

Malicious code in standardcranez3n npm...

EUVD-2025-98677

Malicious code in generalcranez3n npm...

EUVD-2025-105958

Malicious code in damagedcranez3n npm...

EUVD-2025-96444

Malicious code in minorcranez3n npm...

MAL-2025-119345 Malicious code in damaged_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12b475bee37ae4de2ae1eb124cf15d6d7a1b79c4c949437e393504c063286f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb53c195c65fad904345dc0bbe7167e6040eda738d7b08c3aa7e334541a530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74090

Malicious code in weakcraneindigo-38 npm...

Malicious code in possible_crane_aquamarine-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26bbaee920a59328aa2349da5206b107cbdfef48679df9e37b4c325528a9de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74455

Malicious code in minorcraneolive-12 npm...

EUVD-2025-74355

Malicious code in possiblecraneaquamarine-5 npm...

MAL-2025-112429 Malicious code in unknown_crane_turquoise-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c38720061c06a254d61b832504c32cf4286da27f126000bbf354efcb06865a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_crane-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d925934a165f69e2d8bfc990dc54974d1ac6784fabf5ff8454d08df17cf5527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77288

Malicious code in complicatedcrane-smiletea npm...