GO-2026-5039 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, amazon-cloudwatch-agent-operator, cortex, neuvector-dbgen, pulumi-kubernetes-operator, stakater-reloader, gostatsd, manifest-tool, steampipe, haproxy-ingress, cluster-api-ipam-provider-in-cluster, runc, speedtest-go, opentofu, witness,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: dex, amazon-cloudwatch-agent-operator, cortex, maru, stakater-reloader, cfssl, gostatsd, manifest-tool, aws-sigv4-proxy, kubernetes-dns-node-cache, metacontroller, steampipe, cluster-api-ipam-provider-in-cluster, runc, crossplane-provider-aws-iam, swagger, opentofu,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, gostatsd, haproxy-ingress, rclone, tailscale, kargo, gogatekeeper, kubernetes-csi-external-health-monitor, helm-set-status, go-licenses, octo-sts, nri-mssql, splunk-otel-collector, nri-consul, spicedb, k8sgpt-operator, multus-cni, podinfo,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: fixuid, gotestsum, argo-workflows-fips, kubo-fips, openbao-k8s, rook, sonobuoy-fips, yunikorn-web, rancher-telemetry, vault-env, terraform-provider-azapi, prometheus-redis-exporter-fips, kubeflow, nri-postgresql, prometheus-elasticsearch-exporter,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, falcosidekick-fips, argo-workflows-fips, rook, hubble-fips, sonobuoy, prometheus-redis-exporter-fips, kubeflow, prometheus-elasticsearch-exporter, node-problem-detector, kubernetes-csi-livenessprobe-fips, wavefront-collector-for-kubernetes,...