MAL-2026-1831 Malicious code in rabbitmq-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fd48bd646ad6b2f173f479170d732395513c048f0c0f6148205c0e1d08f864 The package rabbitmq-sdk was found to contain malicious code...

Malicious code in rabbitmq-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fd48bd646ad6b2f173f479170d732395513c048f0c0f6148205c0e1d08f864 The package rabbitmq-sdk was found to contain malicious code...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: gatekeeper, yunikorn-web, ctop, crossplane-provider-aws-sqs, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, ksops, kubernetes, thanos, litefs, syft, tetragon, newrelic-fluent-bit-output,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: gatekeeper, yunikorn-web, ctop, crossplane-provider-aws-sqs, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, ksops, kubernetes, thanos, litefs, syft, tetragon, newrelic-fluent-bit-output,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: gatekeeper, yunikorn-web, ctop, crossplane-provider-aws-sqs, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, ksops, kubernetes, thanos, litefs, syft, tetragon, newrelic-fluent-bit-output,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: gatekeeper, yunikorn-web, ctop, crossplane-provider-aws-sqs, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, ksops, kubernetes, thanos, litefs, syft, tetragon, newrelic-fluent-bit-output,...

CLEANSTART-2026-CA79883 Security fixes for GHSA-6V2P-P943-PHR9, GHSA-C6GW-W398-HV78, GHSA-F6X5-JH6R-WRFV, GHSA-HCG3-P754-CR77, GHSA-J5W8-Q4QC-RX2X, GHSA-QXP5-GW88-XV66, GHSA-V778-237X-GJRC, GHSA-VVGC-356P-C3XW applied in versions: 1.15.0-r1

Multiple security vulnerabilities affect the rabbitmq-messaging-topology-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

Malicious code in @purecore/rabbitmq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e503973dbf2c860017e4ea8118ddec5cd43a537c32eb8fca24ac544a86d8822 The package @purecore/rabbitmq was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @purecore/rabbitmq is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-749 Malicious code in @purecore/rabbitmq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e503973dbf2c860017e4ea8118ddec5cd43a537c32eb8fca24ac544a86d8822 The package @purecore/rabbitmq was found to contain malicious code. Source: ghsa-malware...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: govulncheck, gatekeeper, ctop, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, ksops, litefs, tetragon, newrelic-fluent-bit-output, kubernetes-csi-external-attacher, jaeger, azure-workload-identity-webhook, thanos-operator, capslock,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: osv-scanner, grafana-rollout-operator, kubernetes-dashboard, cri-tools, vault-secrets-webhook, gatekeeper, pgtimetable, aws-sigv4-proxy, azcopy, opensearch-k8s-operator, vault-k8s, amazon-cloudwatch-agent-operator, clickhouse-operator, ghaudit, harbor-registry,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: govulncheck, gatekeeper, ctop, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, ksops, litefs, tetragon, newrelic-fluent-bit-output, kubernetes-csi-external-attacher, jaeger, azure-workload-identity-webhook, thanos-operator, capslock,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: govulncheck, osv-scanner, grafana-rollout-operator, kubernetes-dashboard, cri-tools, vault-secrets-webhook, gatekeeper, pgtimetable, aws-sigv4-proxy, azcopy, ctop, opensearch-k8s-operator, vault-k8s, amazon-cloudwatch-agent-operator, clickhouse-operator, ghaudit,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: govulncheck, gatekeeper, ctop, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, ksops, litefs, tetragon, newrelic-fluent-bit-output, kubernetes-csi-external-attacher, jaeger, azure-workload-identity-webhook, thanos-operator, capslock,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: osv-scanner, grafana-rollout-operator, kubernetes-dashboard, cri-tools, vault-secrets-webhook, gatekeeper, pgtimetable, aws-sigv4-proxy, azcopy, opensearch-k8s-operator, vault-k8s, amazon-cloudwatch-agent-operator, clickhouse-operator, ghaudit, harbor-registry,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: langfuse-fips, nerdctl, ratify, crossplane-provider-aws-sqs-fips, tetragon, aws-signer-notation-plugin-fips, timescaledb-parallel-copy, sftpgo-plugin-geoipfilter, cluster-api-ipam-provider-in-cluster, neuvector-sigstore-interface, terraform-provider-pagerduty-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: langfuse-fips, nerdctl, ratify, crossplane-provider-aws-sqs-fips, tetragon, aws-signer-notation-plugin-fips, timescaledb-parallel-copy, sftpgo-plugin-geoipfilter, cluster-api-ipam-provider-in-cluster, neuvector-sigstore-interface, terraform-provider-pagerduty-fips,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: langfuse-fips, nerdctl, ratify, crossplane-provider-aws-sqs-fips, tetragon, aws-signer-notation-plugin-fips, timescaledb-parallel-copy, velero-plugin-for-microsoft-azure-fips, sftpgo-plugin-geoipfilter, cluster-api-ipam-provider-in-cluster,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: langfuse-fips, nerdctl, ratify, crossplane-provider-aws-sqs-fips, tetragon, aws-signer-notation-plugin-fips, timescaledb-parallel-copy, velero-plugin-for-microsoft-azure-fips, sftpgo-plugin-geoipfilter, cluster-api-ipam-provider-in-cluster,...