GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, aactl, tigera-operator, crossplane-provider-aws-lambda, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, libnvidia-container, sigstore-scaffolding, trino, grafana-operator, harbor-registry, kubeflow-katib,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: aactl, crossplane-provider-aws-iam, opensearch-k8s-operator, crossplane-provider-aws-lambda, kubernetes-csi-livenessprobe, yace, grafana-operator, harbor-registry, kubeflow-katib, kubernetes-event-exporter, kubernetes-dns-node-cache, k3s, mongodb-kubernetes-operator,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: aactl, harbor-registry, kubernetes-event-exporter, rancher-loglevel, sbom-convert, nri-kafka, kafka-proxy, sriov-network-device-plugin, portieris, terraform-mcp-server, helm-operator, opencost, dgraph, goreleaser, frp, stakater-reloader, metrics-server,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: argo-events-fips, caddy-fips, aws-flb-firehose, polaris, aws-network-policy-agent, aws-eks-pod-identity-agent, prometheus-redis-exporter, kubernetes-csi-driver-hostpath, cluster-autoscaler-fips, licenseclassifier, lazygit, crossplane-provider-gcp, etcd, supercronic,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: caddy-fips, hubble-ui, prometheus-redis-exporter, kubernetes-csi-driver-hostpath, logstash-exporter-fips, node-problem-detector, crossplane-provider-gcp, etcd, supercronic, kubernetes-dashboard-metrics-scraper-fips, nodetaint, kubernetes-event-exporter, buildkitd,...