EUVD-2025-123148

Malicious code in publish-apex-sqlite-cross-env npm...

EUVD-2025-122952

Malicious code in query-lint-dione-cross-env npm...

EUVD-2025-111609

Malicious code in loglevel-cross-env-exec-update npm...

MAL-2025-141276 Malicious code in cross-env-yakutsk-octans-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec258cbc55d95a4aa0c35968e62956f226510e7535d823debd9ec5c976ed91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141070 Malicious code in convict-cross-env-fornax-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3400ee48bb8e6820f883a6fbadd1dc8b8b946d5fc20c19fd0b0702614d2df39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141267 Malicious code in cross-env-request-markdown-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac399a914c58ef29195046b374c25f58ed3f7b5a0f5be57f42cc767e194bd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141263 Malicious code in cross-env-parcel-forever-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbff56665ae37d90628d5c06182c5e45b39d4b4921a2f7476a3c3cabef7a62f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-helmet-grus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120628

Malicious code in wasat-sadr-iota-cross-env npm...

EUVD-2025-114831

Malicious code in cross-env-zenith-dotenv-safe-cypress npm...

Security update for aws-efs-utils

This update for aws-efs-utils fixes the following issues: Update to version 2.3.3 bsc1240044. Security issues fixed: CVE-2025-55159: slab: incorrect bounds check in getdisjointmut function can lead to potential crash due to out-of-bounds access bsc1248055. CVE-2020-35881: traitobject: log4rs:...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, yunikorn-k8shim, direnv, cluster-api-provider-vsphere, cloud-provider-vsphere, mongodb-kubernetes-operator, docker-credential-acr-env, gobuster, podinfo, hivemind, kubernetes-csi-livenessprobe, kubernetes-dashboard-metrics-scraper, argo-rollouts,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: pgpool2exporter, yunikorn-k8shim, direnv, cluster-api-provider-vsphere, cloud-provider-vsphere, mongodb-kubernetes-operator, docker-credential-acr-env, gobuster, podinfo, hivemind, kubernetes-dashboard-metrics-scraper, sonobuoy, argo-rollouts,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, yunikorn-k8shim, direnv, cluster-api-provider-vsphere, cloud-provider-vsphere, mongodb-kubernetes-operator, docker-credential-acr-env, gobuster, podinfo, hivemind, kubernetes-csi-livenessprobe, kubernetes-dashboard-metrics-scraper, argo-rollouts,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, yunikorn-k8shim, direnv, cluster-api-provider-vsphere, cloud-provider-vsphere, mongodb-kubernetes-operator, docker-credential-acr-env, gobuster, podinfo, hivemind, kubernetes-csi-livenessprobe, kubernetes-dashboard-metrics-scraper, argo-rollouts,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: pgpool2exporter, yunikorn-k8shim, direnv, cluster-api-provider-vsphere, cloud-provider-vsphere, mongodb-kubernetes-operator, docker-credential-acr-env, gobuster, podinfo, hivemind, kubernetes-csi-livenessprobe, kubernetes-dashboard-metrics-scraper, argo-rollouts,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, yunikorn-k8shim, direnv, cluster-api-provider-vsphere, cloud-provider-vsphere, mongodb-kubernetes-operator, docker-credential-acr-env, gobuster, podinfo, hivemind, kubernetes-csi-livenessprobe, kubernetes-dashboard-metrics-scraper, argo-rollouts,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: pgpool2exporter, yunikorn-k8shim, direnv, cluster-api-provider-vsphere, cloud-provider-vsphere, mongodb-kubernetes-operator, docker-credential-acr-env, gobuster, podinfo, hivemind, kubernetes-csi-livenessprobe, kubernetes-dashboard-metrics-scraper, argo-rollouts,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: cis-operator, crossplane, kube-metrics-adapter, nvidia-nsight-compute-12.8, rancher-helm, mountpoint-s3-csi-driver, manifest-tool, kube-metrics-adapter-fips, elvish, container-object-storage-interface, velero-plugin-for-csi-fips, trillian, azurefile-csi-fips,...

Malicious code in epic-env-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f94098f216650c7955adfe4a82c23f4368b9cae20abff8da12aa162e4a8e8b4 The package epic-env-utils was found to contain malicious code...