Malicious code in transform-exponentiation-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b79481ce559cb600cfe4b2897847eb06d38b5cbe4ef456339cbbac7b240e60 The package transform-exponentiation-operator was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview transform-exponentiation-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MAL-2026-665 Malicious code in transform-exponentiation-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b79481ce559cb600cfe4b2897847eb06d38b5cbe4ef456339cbbac7b240e60 The package transform-exponentiation-operator was found to contain malicious code. Source: ghsa-malware...

PT-2026-6506

External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function in github.com/external-secrets/external-secrets...

GO-2026-4351 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator

Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: external-dns, helm-set-status, telegraf, minio, flux-kustomize-controller, steampipe, gitness, rancher-helm, falco-no-driver, conftest, croc, bom, newrelic-fluent-bit-output, traefik, xeol, flux-notification-controller, scorecard, hubble, nerdctl,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: external-dns, helm-set-status, telegraf, minio, flux-kustomize-controller, steampipe, gitness, rancher-helm, falco-no-driver, conftest, croc, bom, newrelic-fluent-bit-output, traefik, xeol, flux-notification-controller, scorecard, hubble, nerdctl,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, swagger, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, rancher-loglevel, newrelic-fluent-bit-output, traefik, nri-jmx,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: swagger, rancher-loglevel, nerdctl, protoc-gen-go-grpc, ytt, flannel, rabbitmq-messaging-topology-operator, kubernetes-dashboard, kubernetes-event-exporter, nri-nginx, fluxcd-kustomize-mutating-webhook, redka, cri-tools, cfssl, headlamp, aws-flb-cloudwatch, src,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: swagger, rancher-loglevel, nerdctl, protoc-gen-go-grpc, ytt, flannel, rabbitmq-messaging-topology-operator, kubernetes-dashboard, kubernetes-event-exporter, nri-nginx, fluxcd-kustomize-mutating-webhook, redka, cri-tools, cfssl, headlamp, aws-flb-cloudwatch, src,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: swagger, rancher-loglevel, nerdctl, protoc-gen-go-grpc, ytt, flannel, rabbitmq-messaging-topology-operator, kubernetes-dashboard, kubernetes-event-exporter, nri-nginx, fluxcd-kustomize-mutating-webhook, redka, cri-tools, cfssl, headlamp, aws-flb-cloudwatch, src,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: swagger, rancher-loglevel, nerdctl, protoc-gen-go-grpc, ytt, flannel, rabbitmq-messaging-topology-operator, kubernetes-dashboard, kubernetes-event-exporter, nri-nginx, fluxcd-kustomize-mutating-webhook, redka, cri-tools, cfssl, headlamp, aws-flb-cloudwatch, src,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: temporal-ui-server, nri-redis, swagger, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, rancher-loglevel, newrelic-fluent-bit-output, traefik,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, nri-redis, swagger, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, rancher-loglevel, newrelic-fluent-bit-output, traefik,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, swagger, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, rancher-loglevel, newrelic-fluent-bit-output, traefik, nri-jmx,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: opencost, etcd, cert-manager-webhook-pdns-fips, osv-scanner, skaffold-fips, syncthing-fips, syncthing, k9s-fips, dex, falco-exporter-fips, tetragon-fips, grpc-health-probe-fips, ksops, knative-operator, longhorn-manager-fips, consul-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: opencost, etcd, cert-manager-webhook-pdns-fips, osv-scanner, skaffold-fips, syncthing-fips, syncthing, k9s-fips, dex, falco-exporter-fips, tetragon-fips, grpc-health-probe-fips, ksops, knative-operator, longhorn-manager-fips, consul-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: opencost, osv-scanner, cert-manager-webhook-pdns-fips, skaffold-fips, syncthing-fips, syncthing, k9s-fips, gops-fips, flannel-cni-plugin-fips, boringssl-fips-static, dex, falco-exporter-fips, tetragon-fips, go-jsonnet, grpc-health-probe-fips, kubernetes-release, ksop...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: opencost, osv-scanner, cert-manager-webhook-pdns-fips, skaffold-fips, syncthing-fips, syncthing, k9s-fips, gops-fips, flannel-cni-plugin-fips, boringssl-fips-static, dex, falco-exporter-fips, tetragon-fips, go-jsonnet, grpc-health-probe-fips, kubernetes-release, ksop...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: opencost, osv-scanner, cert-manager-webhook-pdns-fips, skaffold-fips, syncthing-fips, syncthing, k9s-fips, gops-fips, flannel-cni-plugin-fips, boringssl-fips-static, dex, falco-exporter-fips, tetragon-fips, go-jsonnet, grpc-health-probe-fips, kubernetes-release, ksop...