Malicious code in upstart-lending-status (npm)

Package is malware. It steals credentials, collects system info, and exfiltrates data to a remote server via postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627a2802a53ad7eb751fcac4b0a43245c6b0bf9e667db77051758b24d8bc4d96 The package...

Malicious code in upstartapplicationstatus (npm)

Package is malware. Collects and exfiltrates sensitive info SSH keys, credentials, env vars via insecure HTTPS/HTTP after install. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e154270d6b3540f095f5fc77ab1167448e967009cbb719f6fc087c32fadce15f The package...

Malicious code in upstart-loan-status (npm)

Malicious package with postinstall script exfiltrating sensitive system data to a remote server. Multiple YARA rules and LLM analysis confirm. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7850b2e1fe8a8eeebd2a8593220743deeacbed610ada8e460fcd15bc51c732 The...

MAL-2026-2612 Malicious code in upstart-loan-status (npm)

Malicious package with postinstall script exfiltrating sensitive system data to a remote server. Multiple YARA rules and LLM analysis confirm. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7850b2e1fe8a8eeebd2a8593220743deeacbed610ada8e460fcd15bc51c732 The...

Malicious code in upstart.previewcss (npm)

Package is malware. It collects and exfiltrates sensitive data SSH keys, credentials, environment variables and system info to a remote server. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2d5c329f24c54ca68ce21884867d6b4db6ae64d0e2041af60deb2203cc8830 The...

MAL-2026-2614 Malicious code in upstart.previewcss (npm)

Package is malware. It collects and exfiltrates sensitive data SSH keys, credentials, environment variables and system info to a remote server. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2d5c329f24c54ca68ce21884867d6b4db6ae64d0e2041af60deb2203cc8830 The...

Malicious code in pinstatsd (npm)

Package is malware due to data exfiltration to multiple domains via DNS and HTTPS, along with a suspicious preinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b13ae52dde0a4efddd6d12bc4795b77da5433cb750b4ddb852f1aca27ea457e The package pinstatsd w...

MAL-2026-2654 Malicious code in pinstatsd (npm)

Package is malware due to data exfiltration to multiple domains via DNS and HTTPS, along with a suspicious preinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b13ae52dde0a4efddd6d12bc4795b77da5433cb750b4ddb852f1aca27ea457e The package pinstatsd w...

Malicious code in pinlogger (npm)

The package is a malware due to system info exfiltration via DNS/HTTPS to OAST domains and arbitrary code execution during preinstall. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e78bb72f47ecca78511d87a17bea5f38fb4897dbc117433dfd7667cd97a51d0 The package...

MAL-2026-2653 Malicious code in pinlogger (npm)

The package is a malware due to system info exfiltration via DNS/HTTPS to OAST domains and arbitrary code execution during preinstall. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e78bb72f47ecca78511d87a17bea5f38fb4897dbc117433dfd7667cd97a51d0 The package...

Malicious code in wm-plugin-visions-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fc7d1b94e873a6acaa539c03b3deb578141de07e79343acb659b17d4815077 The package wm-plugin-visions-recorder was found to contain malicious code. Source: ghsa-malware...

CVE-2026-22822 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-77V3-R3JW-J2V2 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

CVE-2026-22822 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-77V3-R3JW-J2V2 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection, nodetaint, dataplaneapi, pluto, secrets-store-csi-driver-provider-aws, fluxcd-kustomize-mutating-webhook, actions-runner-controller, osv-scanner, polaris, stakater-reloader, oras, flux-notification-controller, newrelic-infra-operator,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, commercial-expanso-edge, dex, tkn-fips, kubevirt-cdi-uploadserver-fips, keda-fips, crossplane, coredns, cluster-autoscaler, bento, backup-restore-operator-fips, grafana, net-kourier-fips, weaviate, nemo, opentofu-fips, tkn, ko, falco-no-drive...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, commercial-expanso-edge, dex, tkn-fips, kubevirt-cdi-uploadserver-fips, keda-fips, crossplane, coredns, cluster-autoscaler, bento, backup-restore-operator-fips, grafana, net-kourier-fips, weaviate, nemo, opentofu-fips, tkn, ko, falco-no-drive...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gitlab-fips, livekit-egress, yace-fips, nri-couchbase, aws-flb-cloudwatch-fips, crossplane-function-auto-ready-fips, commercial-expanso-edge, dex, crossplane-provider-aws-rds-fips, crossplane-aws-provider-fips, knative-net-istio-fips, tkn-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: crossplane-provider-gitlab-fips, livekit-egress, yace-fips, nri-couchbase, aws-flb-cloudwatch-fips, crossplane-function-auto-ready-fips, commercial-expanso-edge, dex, crossplane-provider-aws-rds-fips, crossplane-aws-provider-fips, knative-net-istio-fips, tkn-fips,...