Malicious code in action-setup-enos (npm)

Source: amazon-inspector 2a8c231ffd75db68f6571ecaba491b827f5c86e682716dadadf47c74a979f80a The package action-setup-enos was found to contain malicious code. --- Credit: OpenSSF source...

apache-liminal (>=0.0.3rc1, <=0.0.5), apache-liminal-test-spark (0.0.0) +7 more potentially affected by CVE-2025-69872 via diskcache (3.1.1)

diskcache PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on diskcache and may be impacted: - apache-liminal =0.0.3rc1, =0.0.0, =7.0.0a1, =1.2.0, =4.1.0, =6.0.0, =0.2.5, =0.2.7 - mars-gym 0.1.0 Source cves: CVE-2025-69872 Source advisor...

enos (>=4.3.0a0, <=5.0.1), enos-kubernetes (>=0.0.1, <=1.0.5) +3 more potentially affected by CVE-2025-14010 via ansible (2.5.15)

ansible PYPI version 2.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos =4.3.0a0, =0.0.1, =1.3.0rc1, =4.0.0.0rc1, =3.1.0, =3.6.1 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ansible-please (0.1.18), bbot (>=1.0.0, <=1.0.4.1199rc0) +9 more potentially affected by CVE-2025-14010 via ansible (5.10.0)

ansible PYPI version 5.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansible-please 0.1.18 - bbot =1.0.0, =7.2.1, =0.11.0, =0.12.0.post1, =12.0.0.0rc1, =0.1.0, =2.20.0.0a1, =0.5.0, =0.9.0 - tenks 2.0.0 Source cves:...

enos (>=6.0.0, <=6.0.2), enos-kubernetes (>=1.0.9, <=1.2.0) +2 more potentially affected by CVE-2025-14010 via ansible (2.7.9)

ansible PYPI version 2.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos =6.0.0, =1.0.9, =3.0.0a1, =4.11.0 - solida 0.9.7 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

enos-kubernetes (1.0.6), enoslib (>=2.1.0, <=3.0.0a0) +3 more potentially affected by CVE-2023-5115 via ansible (2.7.18)

ansible PYPI version 2.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos-kubernetes 1.0.6 - enoslib =2.1.0, =6.0.0.0rc1, =0.1.0, =0.2.0 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

enos (>=6.0.0, <=6.0.2), enos-kubernetes (>=1.0.9, <=1.2.0) +2 more potentially affected by CVE-2023-5115 via ansible (2.7.9)

ansible PYPI version 2.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos =6.0.0, =1.0.9, =3.0.0a1, =4.11.0 - solida 0.9.7 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

enos (>=4.3.0a0, <=5.0.1), enos-kubernetes (>=0.0.1, <=1.0.5) +3 more potentially affected by CVE-2023-5115 via ansible (2.5.15)

ansible PYPI version 2.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos =4.3.0a0, =0.0.1, =1.3.0rc1, =4.0.0.0rc1, =3.1.0, =3.6.1 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

MAL-2026-2722 Malicious code in action-setup-enos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8c231ffd75db68f6571ecaba491b827f5c86e682716dadadf47c74a979f80a The package action-setup-enos was found to contain malicious code...

Malicious code in action-setup-enos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8c231ffd75db68f6571ecaba491b827f5c86e682716dadadf47c74a979f80a The package action-setup-enos was found to contain malicious code...

apache-liminal (>=0.0.3rc1, <=0.0.5), apache-liminal-test-spark (0.0.0) +7 more potentially affected by CVE-2025-69872 via diskcache (3.1.1)

diskcache PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on diskcache and may be impacted: - apache-liminal =0.0.3rc1, =0.0.0, =7.0.0a1, =1.2.0, =4.1.0, =6.0.0, =0.2.5, =0.2.7 - mars-gym 0.1.0 Source cves: CVE-2025-69872 Source advisor...

enos (>=6.0.0, <=6.0.2), enos-kubernetes (>=1.0.9, <=1.2.0) +2 more potentially affected by CVE-2025-14010 via ansible (2.7.9)

ansible PYPI version 2.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos =6.0.0, =1.0.9, =3.0.0a1, =4.11.0 - solida 0.9.7 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...

enos-kubernetes (1.0.6), enoslib (>=2.1.0, <=3.0.0a0) +3 more potentially affected by CVE-2025-14010 via ansible (2.7.18)

ansible PYPI version 2.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos-kubernetes 1.0.6 - enoslib =2.1.0, =6.0.0.0rc1, =0.1.0, =0.2.0 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...

doniclient (>=0.1.0, <=0.1.3), e2clab (>=2.1.1b1, <=3.7.0) +1 more potentially affected by CVE-2023-6110 via python-openstackclient (5.8.1)

python-openstackclient PYPI version 5.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-openstackclient and may be impacted: - doniclient =0.1.0, =2.1.1b1, =7.0.0a1, =8.0.0 Source cves: CVE-2023-6110 Source advisory: OSV:GHSA-2PPF-2M6F-6V6F...

browbeat (>=0.0.1.dev1287, <=0.0.1.dev1290), catalystcloud-client (1.0.0) +15 more potentially affected by CVE-2023-6110 via python-openstackclient (>=3.3.0, <=6.2.1)

python-openstackclient PYPI version =3.3.0, =0.0.1.dev1287, =0.1.0, =2.1.1b1, =7.0.0a1, =1.2.18, =0.1.6, =11.0.0, =1.0.0, =0.2.5, =0.2.3, =0.8.5, =0.11.0, =0.14.1 and more Source cves: CVE-2023-6110 Source advisory: MEND:CVE-2023-6110...

enos-kubernetes (1.0.6), enoslib (>=2.1.0, <=3.0.0a0) +3 more potentially affected by CVE-2023-5115 via ansible (2.7.18)

ansible PYPI version 2.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos-kubernetes 1.0.6 - enoslib =2.1.0, =6.0.0.0rc1, =0.1.0, =0.2.0 Source cves: CVE-2023-5115 Source advisory: OSV:GHSA-JPVW-P8PR-9G2X...

enos (>=6.0.0, <=6.0.2), enos-kubernetes (>=1.0.9, <=1.2.0) +5 more potentially affected by CVE-2019-10206 via ansible (>=2.7.2, <=2.7.9)

ansible PYPI version =2.7.2, =6.0.0, =1.0.9, =3.0.0a1, =0.0.31, =0.1.1.6 - solida 0.9.7 Source cves: CVE-2019-10206 Source advisory: OSV:GHSA-CQMR-RCPR-CXH3...

amundsen-databuilder (>=1.4.6, <=2.5.19), biweeklybudget (>=0.1.0, <=0.7.0) +10 more potentially affected by CVE-2013-2037 via httplib2 (>=0.9.0, <=0.9.2)

httplib2 PYPI version =0.9.0, =1.4.6, =0.1.0, =4.1.0a0, =1.3.0, =2.1.2, =0.1.1, =0.1.3 - vxadmin 2.0.1 - xadmin-x 0.6.1 Source cves: CVE-2013-2037 Source advisory: OSV:GHSA-Q48Q-77QV-CF9P...

enos-kubernetes (1.0.6), enoslib (>=2.1.0, <=3.0.0a0) +3 more potentially affected by CVE-2021-3533 via ansible (2.7.18)

ansible PYPI version 2.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos-kubernetes 1.0.6 - enoslib =2.1.0, =6.0.0.0rc1, =0.1.0, =0.2.0 Source cves: CVE-2021-3533 Source advisory: OSV:PYSEC-2021-126...

enos (>=6.0.0, <=6.0.2), enos-kubernetes (>=1.0.9, <=1.2.0) +2 more potentially affected by CVE-2021-3533 via ansible (2.7.9)

ansible PYPI version 2.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - enos =6.0.0, =1.0.9, =3.0.0a1, =4.11.0 - solida 0.9.7 Source cves: CVE-2021-3533 Source advisory: OSV:PYSEC-2021-126...