Malicious code in 3layerdipstackoo3m1u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9409725a0c60e28d487058cfed06d57101ed7eb4fdf031e19ad43e72f2597d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack0y4arx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0ee85099f27ca35f55b12120ad7980852aab16079399ddf94f3dec87c8deea The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackujfdgm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2410d34a77cd3d19e207d15edd8221ff5a49932ee4a6052fa30668b92e810b96 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack2cyinb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e160520778ca6e1c474aa74fb066efea18747c08d4efbafcc7ece8ae185f5b21 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

dependency-track

OWASP Dependency-Track Dependency-Track è una piattaforma intelligente di Component Analysis che consente alle organizzazioni di identificare e ridurre i rischi nella supply chain del software. Dependency-Track adotta un approccio unico e molto vantaggioso sfruttando le potenzialità della Softwar...

Supply-Chain

Sicherheit der Software-Lieferkette Eine umfassende dreibändige Buchreihe zur Sicherheit der Software-Lieferkette, die Bedrohungen, Abwehrmaßnahmen und Governance abdeckt. Dieses Open-Source-Manuskript bietet Sicherheitsexperten, Entwicklern und Führungskräften in Organisationen praktische...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

Malicious code in desmosmathwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccdafeec1f447c84fcca9f7f17e41c8e940b8bd65c9caf72b1bddbb2befdea4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MINI-Q664-F2C8-9R9X

Bulletin has no description...

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-grafana, kubernetes-ingress-defaultbackend-fips, crossplane-provider-aws-ssm, k8sgateway, aws-node-termination-handler-fips, kube-oidc-proxy, dns-controller-manager-fips, kitty, kubernetes-dashboard-metrics-scraper-fips, amass,...

Malicious code in thepackagethatworks_ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2026-4753 vulnerabilities

Vulnerabilities for packages: gotrue-fips, mattermost, mattermost-fips, zitadel, rancher, neuvector-fips, rancher-agent, omni-fips, neuvector, omni, commercial-grafana, dex, teleport, gotrue, teleport-operator-fips, dex-fips...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: syft, flux-kustomize-controller-fips, pulumi-kubernetes-operator, kots, bom, apko, melange, trivy, kyverno-fips, grype, kargo, flux-source-controller, argocd-image-updater-fips, argo-cd, src-fingerprint, gitsign, nuclei, task, osv-scanner, k8sgpt,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: metacontroller, kubernetes-ingress-defaultbackend-fips, aws-node-termination-handler-fips, kube-oidc-proxy, spqr, tflint, kubernetes-dashboard-metrics-scraper-fips, mockgen, kubernetes-csi-driver-nfs, kubescape-http-request-fips, amass, aws-s3-controller, openfga,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, xeol, melange, upwind-agent, mapotf, zarf, kaniko-fips, trufflehog-fips, kubevela-fips, argo-events, jfrog-cli, kubevela, teleport, cloudbeat, flux-fips, trufflehog, pulumi-language-yaml, pulumi-language-java, chainloop-cli, nemo,...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: helm-push, metacontroller, kubernetes-ingress-defaultbackend-fips, kube-oidc-proxy, tflint, kubernetes-dashboard-metrics-scraper-fips, mockgen, openfga, cert-manager-webhook-pdns, kube-state-metrics-fips, sftpgo-plugin-pubsub, etcd-fips, gosu-fips, hivemind,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: helm-push, metacontroller, kubernetes-ingress-defaultbackend-fips, kube-oidc-proxy, spqr, tflint, kubernetes-dashboard-metrics-scraper-fips, mockgen, amass, cert-manager-webhook-pdns, minio-operator, kube-state-metrics-fips, nri-mysql, etcd-fips, zarf, gosu-fips,...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain

Personal repositories are where corporate secrets quietly escape. Wiz correlates them to your developers, validates the real risk, and drives the fix...