MAL-2026-5641 Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, zot, bom, apko, nuclei, dagger, melange, pulumi,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, zot, bom, apko, nuclei, dagger, melange, pulumi,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, zot, bom, apko, nuclei, dagger, melange, pulumi,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, kubescape, rancher-fleet, teleport, trufflehog, pulumi-language-dotnet, kots, src-fingerprint, kubevela, tfsec, kaniko, witness, argocd-image-updater, snyk-cli, grype, zot, bom, apko, nuclei, dagger, melange, pulumi,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog, pulumi-language-dotnet, xeol-fips,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog, pulumi-language-dotnet, xeol-fips,...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: atlantis, kyverno-policy-reporter, goreleaser, argo-events, argo-cd, argo-rollouts, kubewatch, bento, kubernetes-event-exporter...

GHSA-V8VW-GW5J-W7M6 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-RQV2-M695-F8J4 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-R48C-V28R-PF6V vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44430 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-95C3-6VVW-4MRQ vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44429 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44428 vulnerabilities

Vulnerabilities for packages: goreleaser...