dependency-track

OWASP Dependency-Track Dependency-Track es una plataforma inteligente de análisis de componentes que permite a las organizaciones identificar y reducir el riesgo en la cadena de suministro de software. Dependency-Track adopta un enfoque único y altamente beneficioso al aprovechar las capacidades ...

Supply-Chain

Seguridad en la Cadena de Suministro de Software Una serie completa de tres libros sobre seguridad en la cadena de suministro de software, que cubre amenazas, defensas y gobernanza. Este manuscrito de código abierto proporciona a profesionales de seguridad, desarrolladores y líderes...

Malicious code in @yane88/listary-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd784784bedda93c768e67f6604062febe7761cb1ff3b1fb2178ad075aef10d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in cloufcrxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb997ba2e8af58bd0d35d6e2cfb2264b4ae0132e071fc5b0e3e58f3326e37a9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackoo3m1u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9409725a0c60e28d487058cfed06d57101ed7eb4fdf031e19ad43e72f2597d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack0y4arx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0ee85099f27ca35f55b12120ad7980852aab16079399ddf94f3dec87c8deea The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackujfdgm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2410d34a77cd3d19e207d15edd8221ff5a49932ee4a6052fa30668b92e810b96 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack2cyinb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e160520778ca6e1c474aa74fb066efea18747c08d4efbafcc7ece8ae185f5b21 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

Malicious code in desmosmathwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccdafeec1f447c84fcca9f7f17e41c8e940b8bd65c9caf72b1bddbb2befdea4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MINI-Q664-F2C8-9R9X

Bulletin has no description...

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-chime-fips, seaweedfs-operator-fips, rancher-webhook-fips, crossplane-provider-aws-fis, crossplane-provider-kubernetes-fips, crossplane-provider-azure-purview, crossplane-provider-azure-network, crossplane-provider-aws-directconnect,...

Malicious code in thepackagethatworks_ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2026-4753 vulnerabilities

Vulnerabilities for packages: dex, teleport-operator-fips, gotrue, commercial-grafana, omni-fips, omni, zitadel, rancher-agent, gotrue-fips, neuvector, teleport, dex-fips, mattermost, mattermost-fips, rancher, neuvector-fips...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: apko, kots, goreleaser, kyverno, pulumi-language-dotnet, gptscript, argo-workflows, src-fingerprint, wolfictl, pulumi, src-fingerprint-fips, skaffold, gitea-fips, packer-fips, melange, syft, k9s, flux-image-automation-controller-fips, argo-cd, grafana-alloy,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-webhook-fips, seaweedfs-operator-fips, tflint-fips, longhorn-cli-fips, crossplane-provider-kubernetes-fips, timestamp-authority-fips, rootlesskit, cluster-api-provider-vsphere-fips, karpenter-fips, knative-client,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, kyverno-fips, goreleaser, gptscript, argo-workflows, syft-fips, k9s, argo-cd, osv-scanner, tfsec, argo-events, k9s-fips, argocd-image-updater, gitaly-fips, grafana-alloy-fips, pulumi-language-yaml, gitlab-rails-ce, kargo, trivy, argo-workflows-fips,...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, dive, timestamp-authority-fips, mage, go-fips, karpenter-fips, containerd, flux-notification-controller-fips, govulncheck, containerd-fips, osv-scanner, vault-k8s-fips, azuredisk-csi, crane, dataplaneapi-fips, argo-events, openbao-fips...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, dive, timestamp-authority-fips, goreleaser, mage, rootlesskit, karpenter-fips, dgraph, crossplane-provider-aws-eks, govulncheck, flux-notification-controller-fips, osv-scanner, vault-k8s-fips, crane, dataplaneapi-fips, rekor,...