165 matches found
GHSA-8FJ7-8H3W-XWFM vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ssm, descheduler, melange, dex, kyverno-policy-reporter, rancher-support-bundle-kit, crossplane-provider-aws-rds, contour, crossplane-provider-aws-route53-fips, pluto-fips, datadog-agent-fips, cert-manager-webhook-pdns, buildkite-agent,...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ssm, descheduler, melange, dex, kyverno-policy-reporter, rancher-support-bundle-kit, crossplane-provider-aws-rds, contour, crossplane-provider-aws-route53-fips, pluto-fips, datadog-agent-fips, cert-manager-webhook-pdns, buildkite-agent,...
Malicious code in classical-blush-goose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120026
Malicious code in classical-blush-goose npm...
EUVD-2025-117331
Malicious code in helpful-indigo-goose npm...
EUVD-2025-117055
Malicious code in strategic-red-goose npm...
EUVD-2025-116991
Malicious code in well-coffee-goose npm...
Malicious code in fantastic_goose_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54df02975caedbb2c82c4f3d18ce184ce336d7b5a5bdc7fb1ced983c1ca579b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100130
Malicious code in deafeninggoosez3n npm...
EUVD-2025-99283
Malicious code in endlessgoosez3n npm...
EUVD-2025-103739
Malicious code in mixedgoosez3n npm...
MAL-2025-131798 Malicious code in zeroth_goose_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b60484007c2d667553c2a173697906ee04260b1d2598e866146cf7918b6591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-105149
Malicious code in funnygoosez3n npm...
EUVD-2025-95866
Malicious code in overwhelminggoosez3n npm...
EUVD-2025-94816
Malicious code in swiftgoosez3n npm...
EUVD-2025-95850
Malicious code in passivegoosez3n npm...
Malicious code in sore_goose_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7472ddf67df2bedb60205200dcadfe2d9a883c31c92e27690e5146c44274dfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in clean_goose_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d892286bc24cffe4db62f6275939a5a2cdf66d433c365611ff214039301b4b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...