Malicious code in isotope-dev (npm)

The package isotope-dev was found to contain malicious code...

Malicious code in sglk-dev-tools (npm)

The package sglk-dev-tools was found to contain malicious code...

Malicious code in sjtu-seererba-web-dev (npm)

The package sjtu-seererba-web-dev was found to contain malicious code...

Malicious code in @ginger-dev/test-utils (npm)

The package @ginger-dev/test-utils was found to contain malicious code...

Malicious code in dev-gui-client (npm)

The package dev-gui-client was found to contain malicious code...

Malicious code in @zalastax/nolb-dev- (npm)

The package @zalastax/nolb-dev- was found to contain malicious code...

Malicious code in shopify-dev (npm)

The package shopify-dev was found to contain malicious code...

Malicious code in ng2-select-dev (npm)

The package ng2-select-dev was found to contain malicious code...

MAL-2025-27472 Malicious code in ng2-select-dev (npm)

The package ng2-select-dev was found to contain malicious code...

MAL-2025-32741 Malicious code in save-dev (npm)

The package save-dev was found to contain malicious code...

MAL-2025-17604 Malicious code in cosmic-dev-server (npm)

The package cosmic-dev-server was found to contain malicious code...

MAL-2025-21060 Malicious code in fusion-dev-cli (npm)

The package fusion-dev-cli was found to contain malicious code...

MAL-2025-33344 Malicious code in sjtu-seererba-web-dev (npm)

The package sjtu-seererba-web-dev was found to contain malicious code...

MAL-2025-14833 Malicious code in armada-dev (npm)

The package armada-dev was found to contain malicious code...

MAL-2025-18344 Malicious code in dev-portal-common (npm)

The package dev-portal-common was found to contain malicious code...

Malicious code in guppy-dev (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b56a4d108a100f12dd3aedb0e1f0f3b8007ecc181e366198a22242473696f219 The OpenSSF Package Analysis project identified 'guppy-dev' @ 2.0.0 n...

MAL-2025-6933 Malicious code in guppy-dev (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b56a4d108a100f12dd3aedb0e1f0f3b8007ecc181e366198a22242473696f219 The OpenSSF Package Analysis project identified 'guppy-dev' @ 2.0.0 n...

AZL-66318 CVE-2025-55199 affecting package helm 3.14.2-10

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. This issue has been resolved in Helm 3.18.5. A workaround involves...

Allocation of Resources Without Limits or Throttling

Overview github.com/helm/helm/pkg/chartutil is a package manager for kubernetes. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the processing of JSON Schema files containing $ref fields that point to device files such as /dev/zero. An...

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

A Helm contributor discovered that it was possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. Impact A malicious chart can point $ref in values.schema.json to a device e.g. /dev/ or other problem file which...