dependency-track

OWASP Dependency-Track Dependency-Track — это интеллектуальная платформа анализа компонентов, которая позволяет организациям выявлять и снижать риски в цепочке поставок программного обеспечения. Dependency-Track использует уникальный и крайне полезный подход, основанный на возможностях Software...

Supply-Chain

Безопасность цепочки поставок программного обеспечения Комплексная серия из трех книг по безопасности цепочки поставок программного обеспечения, охватывающая угрозы, защиту и управление. Эта рукопись с открытым исходным кодом предоставляет специалистам по безопасности, разработчикам и руководител...

Malicious code in @yane88/listary-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd784784bedda93c768e67f6604062febe7761cb1ff3b1fb2178ad075aef10d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in cloufcrxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb997ba2e8af58bd0d35d6e2cfb2264b4ae0132e071fc5b0e3e58f3326e37a9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackoo3m1u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9409725a0c60e28d487058cfed06d57101ed7eb4fdf031e19ad43e72f2597d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack0y4arx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0ee85099f27ca35f55b12120ad7980852aab16079399ddf94f3dec87c8deea The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackujfdgm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2410d34a77cd3d19e207d15edd8221ff5a49932ee4a6052fa30668b92e810b96 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack2cyinb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e160520778ca6e1c474aa74fb066efea18747c08d4efbafcc7ece8ae185f5b21 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

Malicious code in desmosmathwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccdafeec1f447c84fcca9f7f17e41c8e940b8bd65c9caf72b1bddbb2befdea4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MINI-Q664-F2C8-9R9X

Bulletin has no description...

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sfn-fips, crossplane-provider-aws-cloudformation, crossplane-provider-aws-fis-fips, crossplane-provider-aws-autoscaling-fips, prometheus-process-exporter-fips, crossplane-provider-aws-mediastore-fips,...

Malicious code in thepackagethatworks_ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2026-4753 vulnerabilities

Vulnerabilities for packages: omni, dex-fips, teleport, rancher, gotrue, rancher-agent, mattermost-fips, dex, gotrue-fips, omni-fips, teleport-operator-fips, mattermost, neuvector-fips, neuvector, zitadel, commercial-grafana...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: melange, go-licenses, bom, flux-image-automation-controller, task, trivy-fips, k8sgpt, guac, argocd-image-updater, gptscript, syft, pulumi-language-java, timoni, amazon-ssm-agent, argo-workflows-fips, chainctl, crossplane, snyk-cli, goreleaser, argo-workflows, nemo,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: calico, kbld-fips, linkerd2-cni-plugin, controller-gen, crossplane-provider-aws-cloudformation, aws-otel-collector-fips, prometheus-process-exporter-fips, pvc-autoresizer, crossplane-provider-aws-elasticache-fips, crossplane-provider-aws-memorydb, nova-fips,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: nfpm, kubescape-server-fips, syft, external-secrets-operator-fips, mapotf-fips, rancher-fleet, flux-image-automation-controller-fips, pulumi-language-yaml, gomplate-fips, argocd-image-updater-fips, argo-events, chainloop-cli, src-fingerprint, cerbos, teleport,...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: calico, kbld-fips, controller-gen, cert-manager-webhook-pdns-fips, mkcert, spire-controller-manager-fips, istio-pilot-agent, gotenberg, vendir, flux-image-automation-controller-fips, azuredisk-csi, kubecolor, argo-events, conftest-fips, pluto, hugo-fips,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: controller-gen, crossplane-provider-aws-cloudformation, crossplane-provider-aws-memorydb, cert-manager-webhook-pdns-fips, buildah, mkcert, istio-pilot-agent, gotenberg, crossplane-provider-aws-kms, flux-image-automation-controller-fips, kubecolor,...