Malicious code in registry-library-registry-graphql (npm)

The package registry-library-registry-graphql was found to contain malicious code...

MAL-2025-45784 Malicious code in registry-library-registry-graphql (npm)

The package registry-library-registry-graphql was found to contain malicious code...

MAL-2025-22342 Malicious code in hedgehog-registry (npm)

The package hedgehog-registry was found to contain malicious code...

GO-2024-2576 registry-support: decompress can delete files outside scope via relative paths in github.com/devfile/registry-support/registry-library

registry-support: decompress can delete files outside scope via relative paths in github.com/devfile/registry-support/registry-library. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...