Malicious code in csv-nova-eridanus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abf3de98dfec792077b0333e20a8ce8bf28b2841ac4e64efc61058dbde691c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124258

Malicious code in nova-passport-hyperion-dotenv-safe npm...

EUVD-2025-122934

Malicious code in quito-barnard-selenium-nova npm...

EUVD-2025-124047

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova npm...

EUVD-2025-124267

Malicious code in nova-cli-cosmos-phoebe npm...

EUVD-2025-124776

Malicious code in mongodb-vega-nova-weywot npm...

MAL-2025-145669 Malicious code in nova-spectron-impulse-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8476b6ac2431658758159daf4a5664be2e497b0c866561f3d28143c03d717c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145668 Malicious code in nova-slides-concurrently-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8349c57f2f166e822672e88378a5b6c838c5bec0b5f8f03aba07f0521268c16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file, sbom-scorecard...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: runc, spark-operator, wire-go, kubeflow, ini-file, kube-vip-cloud-provider, src-fingerprint, policy-controller, kubescape-operator, terraform-provider-tls, controller-gen, kapp, capslock, kwok, kind, hydra, nfpm, pulumi-kubernetes-operator, task, dataplaneapi,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file, sbom-scorecard...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...