CLEANSTART-2026-OV11554 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: consul-k8s, docker-fips, grype-db, zarf, spegel, chaos-mesh-fips, rancher-helm, headlamp, helm-fips, k9s, kube-arangodb, helm-mapkubeapis, cloudbeat, buildkitd-fips, teleport, neuvector, k8sgpt, tw, syft-fips, datadog-agent, chaos-mesh, envoy-gateway, crossplane,...

CLEANSTART-2026-CX34942 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

Malicious Package

Overview newrelic-infrastructure is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in newrelic-infrastructure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42136 Malicious code in newrelic-infrastructure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: buildkitd, syft, docker-cli-buildx, opa, k8ssandra-client, wolfictl, helm-operator, k8sgpt, kubescape, cluster-api-helm-controller, kargo, xeol, kubevela, melange, eksctl, zot, kaniko, dagger, osv-scanner, fuse-overlayfs-snapshotter, docker-compose, ctop,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cri-tools, ip-masq-agent, prometheus-pushgateway, kustomize, s5cmd, yam, controller-gen, kyverno-policy-reporter, nfs-subdir-external-provisioner, metallb, vexctl, aws-flb-firehose, doppler-kubernetes-operator, kubevela, kpt, caddy, kubernetes-dashboard,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: cri-tools, ip-masq-agent, prometheus-pushgateway, kustomize, s5cmd, yam, controller-gen, kyverno-policy-reporter, nfs-subdir-external-provisioner, metallb, vexctl, aws-flb-firehose, doppler-kubernetes-operator, kubevela, kpt, caddy, kubernetes-dashboard,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: cri-tools, ip-masq-agent, prometheus-pushgateway, kustomize, s5cmd, yam, controller-gen, kyverno-policy-reporter, nfs-subdir-external-provisioner, metallb, vexctl, aws-flb-firehose, doppler-kubernetes-operator, kubevela, kpt, caddy, kubernetes-dashboard,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: cri-tools, ip-masq-agent, prometheus-pushgateway, kustomize, s5cmd, yam, controller-gen, kyverno-policy-reporter, nfs-subdir-external-provisioner, metallb, vexctl, aws-flb-firehose, doppler-kubernetes-operator, kubevela, kpt, caddy, kubernetes-dashboard,...

GHSA-2CGQ-H8XW-2V5J vulnerabilities

Vulnerabilities for packages: ctop, grype, wolfictl, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, neuvector-scanner, kubernetes, cadvisor-fips, cadvisor, buildah...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: ctop, grype, wolfictl, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, neuvector-scanner, kubernetes, cadvisor-fips, cadvisor, buildah...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cri-tools, ip-masq-agent, prometheus-pushgateway, kustomize, syft, crossplane-provider-aws-sqs, kyverno-policy-reporter, tkn, nfs-subdir-external-provisioner, metallb, vexctl, doppler-kubernetes-operator, crossplane-provider-azure-storage, atlantis, bank-vaults,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: cri-tools, ip-masq-agent, prometheus-pushgateway, kustomize, s5cmd, yam, controller-gen, kyverno-policy-reporter, nfs-subdir-external-provisioner, metallb, vexctl, aws-flb-firehose, doppler-kubernetes-operator, kubevela, kpt, caddy, kubernetes-dashboard,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: cri-tools, ip-masq-agent, prometheus-pushgateway, kustomize, s5cmd, yam, controller-gen, kyverno-policy-reporter, nfs-subdir-external-provisioner, metallb, vexctl, aws-flb-firehose, doppler-kubernetes-operator, kubevela, kpt, caddy, kubernetes-dashboard,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: bom, loki, skaffold, flux, helm-operator, kubeflow-katib, kubescape, falcoctl-fips, k3s, helm-operator-fips, policy-controller-fips, gitsign, kpt, rancher-machine, skopeo, argo-workflows-fips, zarf, k3d, flux-image-reflector-controller, tekton-chains, kargo, kots,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: bom, loki, skaffold, flux, helm-operator, kubeflow-katib, kubescape, falcoctl-fips, k3s, helm-operator-fips, policy-controller-fips, gitsign, kpt, rancher-machine, skopeo, argo-workflows-fips, zarf, k3d, flux-image-reflector-controller, tekton-chains, kargo, kots,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: skaffold, kaniko, docker, kubescape, skopeo, k3s, zarf, k3d, kots, buildkitd, k9s, kubernetes, nerdctl, podman, cadvisor, ctop, grype, syft, zot, trivy, wolfictl, newrelic-infrastructure-agent, runc...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: buildkitd, syft, wolfictl, runc, skopeo, kubescape, podman, zot, kaniko, ctop, cadvisor, grype, newrelic-infrastructure-agent, kubernetes, kots, k3d, k9s, skaffold, nerdctl, k3s, zarf, trivy, docker...