dependency-track

OWASP Dependency-Track Dependency-Track è una piattaforma intelligente di Component Analysis che consente alle organizzazioni di identificare e ridurre i rischi nella supply chain del software. Dependency-Track adotta un approccio unico e molto vantaggioso sfruttando le potenzialità della Softwar...

Malicious code in 3layerdipstackoo3m1u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9409725a0c60e28d487058cfed06d57101ed7eb4fdf031e19ad43e72f2597d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack0y4arx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0ee85099f27ca35f55b12120ad7980852aab16079399ddf94f3dec87c8deea The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackujfdgm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2410d34a77cd3d19e207d15edd8221ff5a49932ee4a6052fa30668b92e810b96 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack2cyinb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e160520778ca6e1c474aa74fb066efea18747c08d4efbafcc7ece8ae185f5b21 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Supply-Chain

Sicherheit der Software-Lieferkette Eine umfassende dreibändige Buchreihe zur Sicherheit der Software-Lieferkette, die Bedrohungen, Abwehrmaßnahmen und Governance abdeckt. Dieses Open-Source-Manuskript bietet Sicherheitsexperten, Entwicklern und Führungskräften in Organisationen praktische...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

Malicious code in desmosmathwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccdafeec1f447c84fcca9f7f17e41c8e940b8bd65c9caf72b1bddbb2befdea4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MINI-Q664-F2C8-9R9X

Bulletin has no description...

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp-beta-networksecurity, longhorn-instance-manager, crossplane-provider-aws-evidently-fips, prometheus-adapter-fips, rabbitmq-cluster-operator-fips, kubernetes-csi-external-provisioner, prometheus-nats-exporter-fips,...

Malicious code in thepackagethatworks_ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2026-4753 vulnerabilities

Vulnerabilities for packages: rancher, omni-fips, gotrue, neuvector-fips, teleport, zitadel, dex-fips, neuvector, dex, mattermost, omni, gotrue-fips, rancher-agent, commercial-grafana, teleport-operator-fips, mattermost-fips...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gitea-fips, zot, k8sgpt, kubevela, syft, argocd-image-updater, flux-source-controller-fips, amazon-ssm-agent, kyverno, kyverno-fips, packer, tekton-pipelines, tfsec, chainctl, flux-kustomize-controller-fips, packer-fips, flux-source-controller, kaniko, task,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, longhorn-instance-manager, prometheus-adapter-fips, cilium-certgen-fips, longhorn-cli, rabbitmq-cluster-operator-fips, kubernetes-csi-external-provisioner, prometheus-nats-exporter-fips, cluster-api-helm-controller-fips, overmind, syncthing,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: grype-db, trufflehog-fips, syft, amazon-ssm-agent, packer, external-secrets-operator, gitaly, bom, kargo, mapotf, flux-fips, argo-events-fips, gitlab-runner, mapotf-fips, apko-fips, kubevela-fips, gomplate, grafana-alloy, kubescape-server, gitlab-rails-ce-fips,...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, sftpgo-plugin-auth, prometheus-adapter-fips, overmind, newrelic-nri-statsd, age-fips, fscrypt, kiali-fips, tflint, minify-fips, nri-rabbitmq, promxy, docker-compose-fips, falcoctl-fips, opentelemetry-collector-contrib-fips, thanos-operator-fips,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, rabbitmq-cluster-operator-fips, kubernetes-csi-external-provisioner, overmind, newrelic-nri-statsd, fscrypt, tflint, minify-fips, nri-rabbitmq, victoriametrics-fips, spqr, falcoctl-fips, opentelemetry-collector-contrib-fips,...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain

Personal repositories are where corporate secrets quietly escape. Wiz correlates them to your developers, validates the real risk, and drives the fix...