GO-2026-5039 vulnerabilities

Vulnerabilities for packages: apache-exporter, kubescape, db-operator, crossplane-provider-aws-rds, nri-apache, net-kourier, crossplane-provider-aws-cloudformation, crossplane-provider-aws-elasticache, rabbitmq-cluster-operator, spark-operator, xeol, crossplane-provider-aws-s3,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kustomize, mongodb-kubernetes-operator, apache-exporter, blobfuse2, custom-pod-autoscaler, kubernetes-csi-external-attacher, nri-redis, db-operator, crossplane-provider-aws-rds, kubernetes-dashboard-api, aws-eks-pod-identity-agent, azure-service-operator,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, k8sgpt, glow, prometheus-operator, go-jsonnet, spark-operator, terraform-provider-time, spicedb, terraform-mcp-server, kubernetes-csi-external-resizer, http-echo, percona-server-mongodb-operator, terrafor...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: conftest, kubeflow-katib, nats-fips, cargobump, cilium, cluster-api-aws-controller, container-object-storage-interface-fips, cluster-api-helm-controller, swagger, cert-manager-csi-driver-fips, redka, openbao-k8s, qemu-guesthelper, splunk-otel-collector, nri-redis,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: conftest, kubeflow-katib, oauth2-proxy, metacontroller, terraform-provider-sendgrid, tekton-chains, kubernetes-csi-external-provisioner, step, volume-modifier-for-k8s, grafana-operator, nodetaint, vertical-pod-autoscaler, crossplane-provider-aws-kinesis,...