GO-2026-5039 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, kubernetes-csi-node-driver-registrar, kubeflow, rancher-helm, croc, istio, newrelic-infra-operator, containerd, skopeo, kubernetes-csi-external-snapshotter, dbmate, snyk-cli, kubescape-operator, atlantis, govulncheck, kube-logging-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, kubernetes-csi-node-driver-registrar, ferretdb, kubeflow, croc, newrelic-infra-operator, rancher-helm, rancher-telemetry, custom-pod-autoscaler, dbmate, grpcurl, kubescape-operator, gitleaks, govulncheck, kube-logging-operator, hey,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: rancher-helm, k8sgpt, kubeflow, rancher-telemetry, pombump, neuvector-dbgen, grafana-mimir, timestamp-authority, nri-apache, tofu-controller, metrics-agent, portieris, spark-operator, paranoia, dive, aws-load-balancer-controller, kiali, otel-cli,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: openfga, prometheus-operator, kepler, metallb-fips, local-path-provisioner-fips, op-geth, conftest, prometheus-podman-exporter, render-template, apko-fips, verticadb-operator, kubernetes-csi-livenessprobe-fips, dask-gateway, dbmate, kube-conformance,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-beat-exporter-fips, prometheus-operator, conftest, bank-vaults, docker-compose, kubernetes-csi-livenessprobe-fips, kube-logging-logging-operator, osv-scanner, prometheus-pushgateway-fips, minio-fips, gcsfuse, grafana-operator, certificate-transparency-fips...