GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: apko, pulumi-language-dotnet, argo-events, external-secrets-operator, grafana-alloy, grype, kyverno, melange, guac, syft, wolfictl, osv-scanner, argocd-image-updater, gitlab-runner, cerbos, trufflehog, skaffold, argo-workflows, teleport, kargo, bom, scorecard,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: apko, pulumi-language-dotnet, argo-events, external-secrets-operator, grafana-alloy, grype, kyverno, melange, guac, syft, wolfictl, osv-scanner, argocd-image-updater, gitlab-runner, cerbos, trufflehog, skaffold, argo-workflows, teleport, kargo, bom, scorecard,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: apko, pulumi-language-dotnet, argo-events, external-secrets-operator, grafana-alloy, grype, kyverno, melange, guac, syft, wolfictl, osv-scanner, argocd-image-updater, gitlab-runner, cerbos, trufflehog, skaffold, argo-workflows, teleport, kargo, bom, scorecard,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: apko, pulumi-language-dotnet, argo-events, external-secrets-operator, grafana-alloy, grype, kyverno, melange, guac, syft, wolfictl, osv-scanner, argocd-image-updater, gitlab-runner, cerbos, trufflehog, skaffold, argo-workflows, teleport, kargo, bom, scorecard,...

GHSA-465P-V42X-3FMJ vulnerabilities

Vulnerabilities for packages: kots...

CVE-2026-22728 vulnerabilities

Vulnerabilities for packages: kots...

CVE-2026-22728 vulnerabilities

Vulnerabilities for packages: kots...

GHSA-465P-V42X-3FMJ vulnerabilities

Vulnerabilities for packages: kots...

Malicious code in sonic-kots-jaufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-ub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6191a0201bc68b678aa7178537532393421df8bd55b30a21d5f64fef861d6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifayaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b2b0f61bf024128737dcbbe42e099d5be6e31d7ec8a43cf8316f8ef85b1114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jauab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc1d30cfa1e02ad4c3382b2428b9bea1b709288e79762143cfffdb413d1d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-ujb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2e06bb85bd07fbb6845796e243586e907762d428952ee4bca8e9cf8a838c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-uybajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf68180cde0d187cbd5ef0ab64b4f85a173835a916729eb23d3b4dbc58366bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ceccb1ae753ee364dfbc705ca4d08f8da7d611142720a0f0c650b25596c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvtyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209a956565cd05e082c1ae72c36fad71b0a85ce836e108de971c5f7f53142dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185060 Malicious code in sonic-kots-jaufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185055 Malicious code in sonic-kots-jaab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dacad449794653a0b5a1fa80aea72047b558cceb5e827894de17bf5ef0bda21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00e777f17a13148285f52dada784c5ea4baa150304cf219ef54142d511c9683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185059 Malicious code in sonic-kots-jaufajab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e915719a8df4400def253efcfc08f058bfd1ac9093b10cf7f589e389001068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...