go-pillage-registries

go-pillage-registries यह प्रोजेक्ट एक Docker रजिस्ट्री लेता है और उसकी सूची catalog में मौजूद प्रत्येक इमेज के manifest और configuration को निकालता है। यह Google के crane कमांड के पैकेज का उपयोग करता है, जो Docker की keychain semantics का पालन करता है। यदि आप इसे ओवरराइड करना चाहते हैं, तो...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: nri-prometheus, govulncheck, kafkaexporter, nats, nri-f5, harbor, azure-service-operator, envconsul, kubeflow, knative-serving, bank-vaults, flux-image-automation-controller, tofu-controller, crossplane, argo-workflows, buf, terraform-provider-pagerduty, bom, ytt,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: etcd-fips, snyk-cli, kargo, scorecard, cilium-envoy-fips, rabbitmq-messaging-topology-operator, spire-server, hubble, zot, sriov-network-device-plugin, jfrog-cli, apko-fips, gitlab-pages, envconsul, kubernetes-csi-node-driver-registrar, kind,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: etcd-fips, snyk-cli, kargo, scorecard, cilium-envoy-fips, rabbitmq-messaging-topology-operator, spire-server, hubble, zot, sriov-network-device-plugin, jfrog-cli, apko-fips, gitlab-pages, envconsul, kubernetes-csi-node-driver-registrar, kind,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: node-problem-detector-fips, openbao-k8s, prometheus-blackbox-exporter-fips, pguser, etcd-fips, longhorn-share-manager, nri-apache-fips, kargo, snyk-cli, vale, jitsucom-bulker, cue-fips, kube-logging-operator-custom-runner-fips, docker-machine-driver-linode,...

CVE-2024-34679

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...

EUVD-2025-117227

Malicious code in minor-fuchsia-crane npm...

MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b7680011fb13a9be52884b44764bc62e5c0373cbc7e9591336ccd7f18367eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102083

Malicious code in standardcranez3n npm...

EUVD-2025-98677

Malicious code in generalcranez3n npm...

EUVD-2025-105958

Malicious code in damagedcranez3n npm...

EUVD-2025-96444

Malicious code in minorcranez3n npm...

MAL-2025-119345 Malicious code in damaged_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12b475bee37ae4de2ae1eb124cf15d6d7a1b79c4c949437e393504c063286f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb53c195c65fad904345dc0bbe7167e6040eda738d7b08c3aa7e334541a530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74090

Malicious code in weakcraneindigo-38 npm...

EUVD-2025-74455

Malicious code in minorcraneolive-12 npm...

EUVD-2025-74355

Malicious code in possiblecraneaquamarine-5 npm...

Malicious code in possible_crane_aquamarine-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26bbaee920a59328aa2349da5206b107cbdfef48679df9e37b4c325528a9de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112429 Malicious code in unknown_crane_turquoise-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c38720061c06a254d61b832504c32cf4286da27f126000bbf354efcb06865a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...