Malicious Package

Overview transform-exponentiation-operator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MAL-2026-665 Malicious code in transform-exponentiation-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b79481ce559cb600cfe4b2897847eb06d38b5cbe4ef456339cbbac7b240e60 The package transform-exponentiation-operator was found to contain malicious code. Source: ghsa-malware...

PT-2026-6506

External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function in github.com/external-secrets/external-secrets...

GO-2026-4351 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator

Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: osv-scanner, cosign, k3s, nerdctl, k8sgateway, redka, cilium-cli, src, flux-kustomize-controller, kubo, steampipe, kubeflow-katib, thanos-operator, croc, kubernetes-dashboard-api, flux-notification-controller, timoni, opentofu, aws-flb-kinesis, eksctl, mc,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: osv-scanner, cosign, k3s, nerdctl, k8sgateway, redka, cilium-cli, src, flux-kustomize-controller, kubo, steampipe, kubeflow-katib, thanos-operator, croc, kubernetes-dashboard-api, flux-notification-controller, timoni, opentofu, aws-flb-kinesis, eksctl, mc,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: nri-postgresql, cluster-autoscaler, harbor-registry, policy-controller, cosign, k3s, litestream, nerdctl, chisel, influx, git-sync, thanos-operator, crossplane-provider-aws-dynamodb, kube-vip-cloud-provider, kubernetes-dashboard-api, kapp, kuberay-operator,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: nri-postgresql, harbor-registry, policy-controller, kube-vip-cloud-provider, slsa-verifier, grafana-rollout-operator, clickhouse-operator, pvc-autoresizer, docker, dask-gateway, kubernetes-event-exporter, confluent-cp-docker-utils, amazon-cloudwatch-agent-operator,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: nri-postgresql, harbor-registry, policy-controller, kube-vip-cloud-provider, slsa-verifier, grafana-rollout-operator, clickhouse-operator, pvc-autoresizer, docker, dask-gateway, kubernetes-event-exporter, confluent-cp-docker-utils, amazon-cloudwatch-agent-operator,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: nri-postgresql, harbor-registry, policy-controller, kube-vip-cloud-provider, slsa-verifier, grafana-rollout-operator, clickhouse-operator, pvc-autoresizer, docker, dask-gateway, kubernetes-event-exporter, confluent-cp-docker-utils, amazon-cloudwatch-agent-operator,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: nri-postgresql, harbor-registry, policy-controller, kube-vip-cloud-provider, slsa-verifier, grafana-rollout-operator, clickhouse-operator, pvc-autoresizer, docker, dask-gateway, kubernetes-event-exporter, confluent-cp-docker-utils, amazon-cloudwatch-agent-operator,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: nri-postgresql, cluster-autoscaler, harbor-registry, policy-controller, cosign, k3s, litestream, nerdctl, chisel, influx, git-sync, thanos-operator, crossplane-provider-aws-dynamodb, kube-vip-cloud-provider, kubernetes-dashboard-api, kapp, kuberay-operator,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: nri-postgresql, cluster-autoscaler, harbor-registry, policy-controller, cosign, k3s, litestream, nerdctl, chisel, influx, git-sync, thanos-operator, crossplane-provider-aws-dynamodb, kube-vip-cloud-provider, kubernetes-dashboard-api, kapp, kuberay-operator,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: nri-postgresql, cluster-autoscaler, harbor-registry, policy-controller, cosign, k3s, litestream, nerdctl, chisel, influx, git-sync, thanos-operator, crossplane-provider-aws-dynamodb, kube-vip-cloud-provider, kubernetes-dashboard-api, kapp, kuberay-operator,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: dex, net-kourier-fips, kubo, vault-secrets-webhook, etcd-fips, hubble, newrelic-infra-operator, cluster-api-fips, kubernetes-csi-driver-nfs, dockerize-fips, flux, terraform-provider-azuread-fips, kubernetes-csi-external-resizer, harbor-registry, aactl,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: dex, net-kourier-fips, kubo, vault-secrets-webhook, etcd-fips, hubble, newrelic-infra-operator, cluster-api-fips, kubernetes-csi-driver-nfs, dockerize-fips, flux, terraform-provider-azuread-fips, kubernetes-csi-external-resizer, harbor-registry, aactl,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: dex, net-kourier-fips, kubo, vault-secrets-webhook, age, hubble, newrelic-infra-operator, cluster-api-fips, kubernetes-csi-driver-nfs, dockerize-fips, flux, terraform-provider-azuread-fips, kubernetes-csi-external-resizer, harbor-registry, aactl,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: dex, net-kourier-fips, kubo, vault-secrets-webhook, age, hubble, newrelic-infra-operator, cluster-api-fips, kubernetes-csi-driver-nfs, dockerize-fips, flux, terraform-provider-azuread-fips, kubernetes-csi-external-resizer, harbor-registry, aactl,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: dex, net-kourier-fips, kubo, vault-secrets-webhook, age, hubble, newrelic-infra-operator, cluster-api-fips, kubernetes-csi-driver-nfs, dockerize-fips, flux, terraform-provider-azuread-fips, kubernetes-csi-external-resizer, harbor-registry, aactl,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: dex, net-kourier-fips, kubo, vault-secrets-webhook, age, hubble, newrelic-infra-operator, cluster-api-fips, kubernetes-csi-driver-nfs, dockerize-fips, flux, terraform-provider-azuread-fips, kubernetes-csi-external-resizer, harbor-registry, aactl,...