500 matches found
Malicious Package
Overview algol-prompts-meissa-karma is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
PT-2026-89988
TuxCare rebuilt karma to address 1 CVE. Fixed in 4.1.0-tuxcare.4...
Malicious Package
Overview karma-proxy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
MAL-2026-14267 Malicious code in karma-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379b8e968c18bc5df2f2e00ad56f6c1c139bc97d4a8b19e6d1a917398ad72e58 On npm install, the package's postinstall lifecycle script collects host identifiers os.hostname, platform, arch, Node.js version, package name,...
Malicious code in karma-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379b8e968c18bc5df2f2e00ad56f6c1c139bc97d4a8b19e6d1a917398ad72e58 On npm install, the package's postinstall lifecycle script collects host identifiers os.hostname, platform, arch, Node.js version, package name,...
org.webjars.npm:karma-phantomjs-launcher (>=1.0.1, <=1.0.4), org.webjars.npm:phantomjs-prebuilt (2.1.16) +1 more potentially affected by CVE-2026-19693 via org.webjars.npm:extract-zip (>=1.7.0, <=2.0.1)
org.webjars.npm:extract-zip MAVEN version =1.7.0, =1.0.1, =3.3.0, =7.1.0 Source cves: CVE-2026-19693 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-19653642...
GO-2026-5777 vulnerabilities
Vulnerabilities for packages: karma-fips, fluxcd-kustomize-mutating-webhook, fluxcd-kustomize-mutating-webhook-fips, commercial-kyverno, kyverno, telegraf, cosmo-router-fips, zitadel, karma, cosmo-router...
GO-2026-5775 vulnerabilities
Vulnerabilities for packages: karma-fips, fluxcd-kustomize-mutating-webhook, fluxcd-kustomize-mutating-webhook-fips, commercial-kyverno, kyverno, telegraf, cosmo-router-fips, zitadel, karma, cosmo-router...
GO-2026-5774 vulnerabilities
Vulnerabilities for packages: karma-fips, fluxcd-kustomize-mutating-webhook, fluxcd-kustomize-mutating-webhook-fips, commercial-kyverno, kyverno, telegraf, cosmo-router-fips, zitadel, karma, cosmo-router...
GO-2026-5774 vulnerabilities
Vulnerabilities for packages: karma, telegraf, fluxcd-kustomize-mutating-webhook, kyverno...
GO-2026-5775 vulnerabilities
Vulnerabilities for packages: karma, telegraf, fluxcd-kustomize-mutating-webhook, kyverno...
GO-2026-5777 vulnerabilities
Vulnerabilities for packages: karma, telegraf, fluxcd-kustomize-mutating-webhook, kyverno...
GO-2026-5662 vulnerabilities
Vulnerabilities for packages: jaeger, loki, mc, certificate-transparency, datadog-agent, cloud-sql-proxy, keda, tempo, prometheus-pushgateway, aws-otel-collector, telegraf, karma, minio-object-browser, mcp-grafana, istio, minio, trillian, minio-operator, grafana-pyroscope, splunk-otel-collector...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, step-issuer, gitness, rclone, buf, karma, tkn, gogatekeeper, step, cloudflared, step-ca, caddy, sftpgo...
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: jaeger, loki, mc, certificate-transparency, amazon-cloudwatch-agent-operator, opentelemetry-collector, prometheus, datadog-agent, cloud-sql-proxy, node-problem-detector, keda, tempo, prometheus-pushgateway, aws-otel-collector, karma, grafana, k8sgpt, istio,...
CLSA-2026-1785204345 TuxCare security update for karma (2 CVEs)
TuxCare rebuilt karma to address 2 CVEs. Fixed in 4.0.0-tuxcare.1...
CLSA-2026-1785204347 TuxCare security update for karma (2 CVEs)
TuxCare rebuilt karma to address 2 CVEs. Fixed in 1.5.0-tuxcare.1...
CLSA-2026-1785204336 TuxCare security update for karma (2 CVEs)
TuxCare rebuilt karma to address 2 CVEs. Fixed in 1.7.0-tuxcare.1...