GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: hubble-ui, aws-load-balancer-controller, keda, dgraph, sealed-secrets, kafkaexporter, opentelemetry-collector, promxy, rabbitmq-default-user-credential-updater, headlamp, newrelic-k8s-metadata-injection, pulumi-language-yaml, k3s, kserve, github-mcp-server,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, nova-fips, fscrypt, net-kourier-fips, cilium-envoy, karpenter, cloudnative-pg-fips, aws-signer-notation-plugin, knative-operator, newrelic-k8s-metadata-injection-fips, helm-operator-fips, cert-manager, trivy-operator-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, flux-notification-controller, kubernetes-csi-livenessprobe, pulumi, envoy-ratelimit, docker-compose, up, grype, helm-operator-fips, cloud-sql-proxy-fips, kyverno-policy-reporter-kyverno-plugin, cloudflared, tigera-operator-fips,...