CVE-2026-45720

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.7.3, SAML.getSession in internal/pkg/auth/interceptor/saml.go checks SAMLAssertion.Used and marks it used in separate state operations. Concurrent requests carrying the same captured...

Malicious code in internal-pkg (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in internal-pkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2022-1631 Malicious code in blz-internal-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b447563fa806880a2d1e5c85bd22a6d1db863feb00eb5337d44ee85468389eb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in blz-internal-pkg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...