GO-2026-5039 vulnerabilities

Vulnerabilities for packages: flux, kubescape-operator, kubernetes-csi-livenessprobe, continuity, fuse-overlayfs-snapshotter, sigstore-scaffolding, helm-push, kapp-controller, amazon-cloudwatch-agent-operator, kyverno, opa, litefs, tofu-controller, datadog-agent, tetragon, nri-haproxy, flannel,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, pguser, amass, kapp-controller, amazon-cloudwatch-agent-operator, hey, cosign, git-lfs, clickhouse-operator, kubernetes-csi-external-resizer, blobfuse2, litefs, restic,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: knative-client, kubernetes-dns-node-cache, incert, pdfcpu, nri-nginx, terraform-provider-time, kubernetes-dashboard, apache-exporter, q, opentelemetry-collector-contrib, grype, pgtimetable, gitlab-kas, kine, tailscale, kube-metrics-adapter,...

Malicious Package

Overview newrelic-infra-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, helm-set-status, cilium-certgen, cluster-api-aws-controller, juicefs, influx, verticadb-operator, k3d, prometheus-elasticsearch-exporter, pombump, s5cmd, trufflehog-fips, conftest, kind, cilium-envoy, azure-service-operator-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: vault-k8s-fips, crossplane-provider-aws, influx, k3d, prometheus-elasticsearch-exporter, conftest, temporal-server, weaviate, secrets-store-csi-driver, gitsign, pulumi-language-dotnet, prometheus-mongodb-exporter, dynamic-localpv-provisioner, logstash-exporter-fips,...