GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: eksctl, cert-manager-csi-driver, delve, sftpgo-plugin-pubsub, cis-operator, flux-image-reflector-controller, scorecard, crossplane, external-secrets-operator, witness, policy-controller, knative-operator, crossplane-provider-azure-storage, grafana-pyroscope,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: manifest-tool, sftpgo-plugin-pubsub, yunikorn-web, crossplane-provider-azure-storage, grafana-pyroscope, sbom-convert, terraform-provider-aws, kyverno-policy-reporter-ui, k8ssandra-client, falco-no-driver, cloud-provider-azure, authservice, coredns, kyverno,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: seaweedfs, k8ssandra-client, cloud-provider-aws, rabbitmq-messaging-topology-operator-fips, gitlab-pages, flux-helm-controller, prometheus-operator, witness, apko-fips, cerbos, gitlab-kas, xeol, crane, spegel, cephcsi, kubernetes-dashboard, dask-gateway,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: seaweedfs, k8ssandra-client, cloud-provider-aws, rabbitmq-messaging-topology-operator-fips, gitlab-pages, flux-helm-controller, prometheus-operator, witness, apko-fips, cerbos, gitlab-kas, xeol, crane, spegel, cephcsi, kubernetes-dashboard, dask-gateway,...

EUVD-2025-177889

Malicious code in mesosphere-planckscale-quark-promise npm...

EUVD-2025-176731

Malicious code in rehype-mesosphere-orbit-puppeteer npm...

EUVD-2025-176775

Malicious code in redgiant-cypress-mesosphere-technosignature npm...

MAL-2025-187986 Malicious code in mesosphere-chai-hermes-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3a859d8b89079691e1fa4081212caa22fbc584c0379ef009eee6eb1c9d5ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187288 Malicious code in hawkingradiation-aether-mesosphere-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33677574330eb0f97322854d638a9210badd223d764bd7216dd99dbd4dd9d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178594

Malicious code in hawkingradiation-aether-mesosphere-loopback npm...

EUVD-2025-177227

Malicious code in phenomic-mesosphere-multiverse-paleoecology npm...

EUVD-2025-178700

Malicious code in global-mesosphere-extremophile-ablation npm...

Malicious code in mesosphere-chai-hermes-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3a859d8b89079691e1fa4081212caa22fbc584c0379ef009eee6eb1c9d5ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177894

Malicious code in mesosphere-genomics-oscillation-mechatronics npm...

EUVD-2025-177887

Malicious code in mesosphere-query-dynamo-uranology npm...

EUVD-2025-177896

Malicious code in mesosphere-chai-hermes-eris npm...

EUVD-2025-177892

Malicious code in mesosphere-jupiter-sirius-spinner npm...

EUVD-2025-178779

Malicious code in ganymede-mesosphere-nconf-local npm...

Malicious code in chai-mesosphere-astro-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f500d392e79b09d20edac037fb631418c2a0f9db9f0dc9a1e9e0a350f6138b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175442

Malicious code in yildun-mesosphere-redis-spectron npm...