CLEANSTART-2026-WE84072 Security fixes in newrelic-infrastructure-bundle 3.3.31-r0

Package newrelic-infrastructure-bundle version 3.3.31-r0 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-SQ60028 Security fixes in newrelic-infrastructure-agent 1.73.1-r0

Package newrelic-infrastructure-agent version 1.73.1-r0 fixes 11 vulnerabilities: CVE-2026-39836, CVE-2026-33811, CVE-2026-33814, CVE-2026-42499, CVE-2026-39820...

CLEANSTART-2026-XP63957 Security fixes for CVE-2026-42504 applied in versions: 1.76.1-r0

Security vulnerability affects the newrelic-infrastructure-agent package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GN31514 Security fixes for CVE-2026-42504 applied in versions: 3.3.31-r0

Security vulnerability affects the newrelic-infrastructure-bundle package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OV11554 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kubevela, neuvector-fips, ctop, helm-operator-fips, helm-operator, zot, helm-set-status, kube-arangodb, chartmuseum, buildkitd, spegel-fips, docker, kgateway, linkerd2, kots, trivy-fips, gatekeeper, grype-fips, rancher-helm, chaos-mesh-fips, kaniko, scorecard,...

CLEANSTART-2026-CX34942 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

Malicious Package

Overview newrelic-infrastructure is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infrastructure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42136 Malicious code in newrelic-infrastructure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, helm-operator, melange, wolfictl, xeol, neuvector-scanner, rancher-fleet, fuse-overlayfs-snapshotter, spegel, helm-push, k3s, trivy, buildkitd, k8ssandra-client, kubevela, envoy-gateway, kubescape, linkerd2, kots, skaffold, chartmuseum,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, helm-operator, pulumi-language-java, vite, ferretdb, amass, kwok, helm-push, metrics-server, nfs-subdir-external-provisioner, pombump, oras, q, cert-exporter, nri-redis, esbuild, golangci-lint, kaf, flux, s5cmd, kube-bench, dive, k3d,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, helm-operator, pulumi-language-java, vite, ferretdb, amass, kwok, helm-push, metrics-server, nfs-subdir-external-provisioner, pombump, oras, q, cert-exporter, nri-redis, esbuild, golangci-lint, kaf, flux, s5cmd, kube-bench, dive, k3d,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, helm-operator, pulumi-language-java, vite, ferretdb, amass, kwok, helm-push, metrics-server, nfs-subdir-external-provisioner, pombump, oras, q, cert-exporter, nri-redis, esbuild, golangci-lint, kaf, flux, s5cmd, kube-bench, dive, k3d,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, helm-operator, pulumi-language-java, vite, ferretdb, amass, kwok, helm-push, metrics-server, nfs-subdir-external-provisioner, pombump, oras, q, cert-exporter, nri-redis, esbuild, golangci-lint, kaf, flux, s5cmd, kube-bench, dive, k3d,...

GHSA-2CGQ-H8XW-2V5J vulnerabilities

Vulnerabilities for packages: kubernetes, ctop, grype, cadvisor-fips, cadvisor, neuvector-scanner, wolfictl, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, buildah...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: kubernetes, ctop, grype, cadvisor-fips, cadvisor, neuvector-scanner, wolfictl, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, buildah...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, helm-operator, melange, pulumi-language-java, ferretdb, amass, kwok, helm-push, metrics-server, nfs-subdir-external-provisioner, cert-exporter, external-dns, rekor, falcoctl, flux-kustomize-controller, crossplane-provider-aws-rds, golangci-lint,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, helm-operator, pulumi-language-java, vite, ferretdb, amass, kwok, helm-push, metrics-server, nfs-subdir-external-provisioner, pombump, oras, q, cert-exporter, nri-redis, esbuild, golangci-lint, kaf, flux, s5cmd, kube-bench, dive, k3d,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, helm-operator, pulumi-language-java, vite, ferretdb, amass, kwok, helm-push, metrics-server, nfs-subdir-external-provisioner, pombump, oras, q, cert-exporter, nri-redis, esbuild, golangci-lint, kaf, flux, s5cmd, kube-bench, dive, k3d,...