150 matches found
Malicious code in sonic-kots-ja (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00e777f17a13148285f52dada784c5ea4baa150304cf219ef54142d511c9683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-jab (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ceccb1ae753ee364dfbc705ca4d08f8da7d611142720a0f0c650b25596c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-jauab (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc1d30cfa1e02ad4c3382b2428b9bea1b709288e79762143cfffdb413d1d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-jaufb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-ub (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6191a0201bc68b678aa7178537532393421df8bd55b30a21d5f64fef861d6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-ujb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2e06bb85bd07fbb6845796e243586e907762d428952ee4bca8e9cf8a838c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sonic-kots-uybajb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf68180cde0d187cbd5ef0ab64b4f85a173835a916729eb23d3b4dbc58366bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185059 Malicious code in sonic-kots-jaufajab (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e915719a8df4400def253efcfc08f058bfd1ac9093b10cf7f589e389001068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185055 Malicious code in sonic-kots-jaab (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dacad449794653a0b5a1fa80aea72047b558cceb5e827894de17bf5ef0bda21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185060 Malicious code in sonic-kots-jaufb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: steampipe, wolfictl, trivy-operator, zot, zarf, syft, rancher-fleet, k9s, kots, tfsec, xeol, kubescape, grype, snyk-cli, trivy, tflint, terraform, opentofu, terragrunt, conftest...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: steampipe, wolfictl, trivy-operator, zot, zarf, syft, rancher-fleet, k9s, kots, tfsec, xeol, kubescape, grype, snyk-cli, trivy, tflint, terraform, opentofu, terragrunt, conftest...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: trivy-operator, zot, xeol, grype-fips, trivy-fips, kots, tflint, cloudbeat-fips, conftest, rancher-fleet-fips, cloudbeat, zarf, chainctl, kubescape, rancher-fleet, conftest-fips, tfsec, terraform-fips, opentofu, k9s-fips, syft-fips, opentofu-fips, wolfictl, grype-db,...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: trivy-operator, zot, xeol, grype-fips, trivy-fips, kots, tflint, cloudbeat-fips, conftest, rancher-fleet-fips, cloudbeat, zarf, chainctl, kubescape, rancher-fleet, conftest-fips, tfsec, terraform-fips, opentofu, k9s-fips, syft-fips, opentofu-fips, wolfictl, grype-db,...
CVE-2025-53547 vulnerabilities
Vulnerabilities for packages: envoy-gateway, linkerd2, cerbos, flux-source-controller, istio, helm-push, k8sgpt, cilium-cli, zot, helm-docs, zarf, cert-manager-cmctl, rancher-fleet, k8ssandra-client, k9s, kargo, chartmuseum, kots, flux-helm-controller, pluto, helm-operator, chart-testing, tw,...
GHSA-557J-XG8C-Q2MM vulnerabilities
Vulnerabilities for packages: envoy-gateway, linkerd2, cerbos, flux-source-controller, istio, helm-push, k8sgpt, cilium-cli, zot, helm-docs, zarf, cert-manager-cmctl, rancher-fleet, k8ssandra-client, k9s, kargo, chartmuseum, kots, flux-helm-controller, pluto, helm-operator, chart-testing, tw,...
GHSA-FV92-FJC5-JJ9H vulnerabilities
Vulnerabilities for packages: spark-operator, atlantis-fips, docker-compose, aws-otel-collector-fips, grype-fips, kube-bench, conftest, docker-cli-buildx-fips, nerdctl-fips, calico-fips, kyverno-policy-reporter-ui-fips, splunk-otel-collector-fips, cluster-api, docker-compose-fips, chainctl,...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: envoy-gateway, linkerd2, flux-source-controller, osv-scanner, dagger, opa, wolfictl, helm-push, k8sgpt, cilium-cli, docker, zot, kubevela, zarf, syft, cert-manager-cmctl, rancher-fleet, k8ssandra-client, kargo, chartmuseum, flux-helm-controller, kots, opa-envoy,...