Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

MAL-2026-5641 Malicious code in goreleaser-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-2V5F-5R6W-P67R vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-45781 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: nfpm, gitea, gptscript, external-secrets-operator, crossplane, kubescape, flux-image-automation-controller, teleport, wolfictl, kyverno, k9s, pulumi-language-dotnet, src-fingerprint, argo-cd, grafana-alloy, kaniko, pulumi-kubernetes-operator, gitlab-runner,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: nfpm, gitea, gptscript, external-secrets-operator, crossplane, kubescape, flux-image-automation-controller, teleport, wolfictl, kyverno, k9s, pulumi-language-dotnet, src-fingerprint, argo-cd, grafana-alloy, kaniko, pulumi-kubernetes-operator, gitlab-runner,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: nfpm, gitea, gptscript, external-secrets-operator, crossplane, kubescape, flux-image-automation-controller, teleport, wolfictl, kyverno, k9s, pulumi-language-dotnet, src-fingerprint, argo-cd, grafana-alloy, kaniko, pulumi-kubernetes-operator, gitlab-runner,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: nfpm, gitea, gptscript, external-secrets-operator, crossplane, kubescape, flux-image-automation-controller, teleport, wolfictl, kyverno, k9s, pulumi-language-dotnet, src-fingerprint, argo-cd, grafana-alloy, kaniko, pulumi-kubernetes-operator, gitlab-runner,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: trivy, coder-fips, nuclei, gitlab-runner, scorecard, mapotf-fips, kubescape-server, kaniko-fips, google-osconfig-agent, redpanda-console, gitea, flux-fips, kubescape, guac, snyk-cli, argo-workflows-fips, argocd-image-updater, grype, argo-workflows, bom, cloudbeat-fip...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trivy, coder-fips, nuclei, gitlab-runner, scorecard, mapotf-fips, kubescape-server, kaniko-fips, google-osconfig-agent, redpanda-console, gitea, flux-fips, kubescape, guac, snyk-cli, argo-workflows-fips, argocd-image-updater, grype, argo-workflows, bom, cloudbeat-fip...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: argo-events, kubernetes-event-exporter, bento, argo-cd, atlantis, argo-rollouts, kubewatch, kyverno-policy-reporter, goreleaser...

GHSA-V8VW-GW5J-W7M6 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-RQV2-M695-F8J4 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-R48C-V28R-PF6V vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44430 vulnerabilities

Vulnerabilities for packages: goreleaser...

GHSA-95C3-6VVW-4MRQ vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44429 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44427 vulnerabilities

Vulnerabilities for packages: goreleaser...