Malicious code in exciting-pink-rook (npm)

Source: amazon-inspector 2a2c78cf2e1d46d7790981a1079c9aaad1a3de138326e1fb0707a8f534f0cc6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in delightful-aquamarine-rook (npm)

Source: amazon-inspector a8263d2c6e48ea165f9c77064c420b44ec852bf66784508d06430f94345b5ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in delicate-blush-rook (npm)

Source: amazon-inspector 58b1d420b919eccc418aed707642aa04cdc98bb021e8b10fbd76a621e9b1e562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in continued-chocolate-rook (npm)

Source: amazon-inspector 123f2fde06d448f82543d4935ac3574bc93a68f4aed75d4b4545c06cdcfed666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in compact-maroon-rook (npm)

Source: amazon-inspector 052f5d927b280655b9d75714a98a40f18d53f32edd7719807ece9baba53ee3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chemical-orange-rook (npm)

Source: amazon-inspector 58e1a3a32001a2dfbf79dcfbc3a5bc8115b9ff31d754925dc91098bf3de5a355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in aesthetic-indigo-rook (npm)

Source: amazon-inspector 9618c7107d6e3b367f66e7e14e210a19b4e02d183aae1b212eccad38c205459f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-8962: RHODF 4.20.17 release DFBUGS-8003: GSS Rook Ceph metrics are not being scraped, and the...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sops, ksops, spire-server, chezmoi, hugo-extended, trivy, bank-vaults, buildkitd, kubescape, goreleaser, druid, step, wal-g, pulumi, guac, rook, prometheus-operator, k8sgpt, thanos, up, rekor, rclone, zarf, airflow, cosign, terragrunt, step-ca, opentelemetry-collecto...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: delve, rancher-helm, sops, crossplane-provider-aws-cloudwatchlogs, spqr, volume-modifier-for-k8s, grafana-rollout-operator, kuma, paranoia, polaris, rancher, kube-state-metrics, aws-efs-csi-driver, rabbitmq-cluster-operator, crossplane-provider-aws-sqs, croc,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: sops, terraform-provider-azurerm, ksops, rabbitmq-messaging-topology-operator, spire-server, terraform, crossplane-provider-azure-authorization, flux-image-automation-controller, neuvector-sigstore-interface, flux-helm-controller, bank-vaults, buildkitd, kubescape,...

CVE-2025-30204 affecting package rook for versions less than 1.6.2-29

CVE-2025-30204 affecting package rook for versions less than 1.6.2-29. A patched version of the package is available...

CVE-2025-11065 affecting package rook for versions less than 1.6.2-29

CVE-2025-11065 affecting package rook for versions less than 1.6.2-29. A patched version of the package is available...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: sops, kube-arangodb, rancher, loki, neuvector-sigstore-interface, ko, spiffe-helper, falco-no-driver, seaweedfs, grafana, teleport, dkron, rook, crossplane, minio, vexctl, syft, containerd, wolfictl, hydra, cosign, terragrunt, traefik, vitess, cert-manager,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: sops, kube-arangodb, rancher, loki, neuvector-sigstore-interface, ko, spiffe-helper, falco-no-driver, seaweedfs, grafana, teleport, dkron, rook, crossplane, minio, vexctl, syft, containerd, wolfictl, hydra, cosign, terragrunt, traefik, vitess, cert-manager,...

AZL-75564 CVE-2025-11065 affecting package rook 1.6.2-27

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

Malicious code in querulous-tomato-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4576a5b87a9b1b10ca144423586d36a7b826df4efe3835bfc69499d18f9034d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117142

Malicious code in querulous-tomato-rook npm...

EUVD-2025-117102

Malicious code in serious-lime-rook npm...

Malicious code in breezy_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc2e3ae1960205baa285dfac7aa63000c5d33672f8a1d756a55845f38e8aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...