MAL-2022-2944
CriticalAdvisory
Published 20 Jun 2022In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 14
- of 17,781 indexed, latest versions
- Container images
- 14
- deployed by those charts
- Fix available
- None
- affected package
Malicious code in extraneous-detected (npm)
Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 14 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| extraneous-detectednpm | 0.0.0 | no fix listed | 14 |
- OSV records
- MAL-2022-2944
- Also known as
- GHSA-46x4-f3w7-wfvg
Charts affected
14 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| lemmyananace-chartsVerified publisher | 0.6.15 | 1 of 5See more | 7,210 |
| kratos-selfservice-ui-nodeory | 0.64.0 | 1 of 1See more | 1,966 |
| tdarrvhdirkVerified publisher | 5.0.5 | 1 of 2See more | 26,657 |
| otbrcharts-derwitt-devVerified publisher | 0.2.0 | 1 of 1See more | 12,779 |
| ethereumcloudnativeapp | 1.0.0 | 1 of 3See more | 27,417 |
| nublado2lsst-sqre | 0.8.5 | 1 of 2See more | 17,779 |
| sentence-collectormozilla | 0.1.2 | 1 of 2See more | 6,684 |
| cloudcmdmy0nVerified publisher | 0.0.3 | 1 of 1See more | 3,128 |
| smilencsaVerified publisher | 1.1.0 | 1 of 23See more | 109,294 |
| openwhiskopenwhisk | 1.0.0 | 1 of 10See more | 36,215 |
| example-idpory | 0.64.0 | 1 of 1See more | 838 |
| kratos-selfservice-ui-noderadar-baseVerified publisher | 0.43.1 | 1 of 1See more | 2,969 |
| grafanasvtech-public-helm-charts | 1.0.0 | 1 of 2See more | 10,902 |
| joplintobiassackmann | 0.1.7 | 1 of 2See more | 5,535 |
Container images carrying it
14 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| coderaiser/ | b34a9775c7ce | extraneous-detected | no fix listed | 1 |
| dessalines/ | ee4c620d8e93 | extraneous-detected | no fix listed | 1 |
| ethereumex/ | a7603aa8df4c | extraneous-detected | no fix listed | 1 |
| haveagitgat/ | 3ff0913202dd | extraneous-detected | no fix listed | 1 |
| joplin/ | 3f7b852959aa | extraneous-detected | no fix listed | 1 |
| lsstsqre/ | b75bf8aaafa4 | extraneous-detected | no fix listed | 1 |
| mozilla/ | 1da6ff5c4895 | extraneous-detected | no fix listed | 1 |
| openthread/ | f307f59f6432 | extraneous-detected | no fix listed | 1 |
| openwhisk/ | c80dba0de3aa | extraneous-detected | no fix listed | 1 |
| oryd/ | 6465e95993b5 | extraneous-detected | no fix listed | 1 |
| oryd/ | 46a7bac1ad0c | extraneous-detected | no fix listed | 1 |
| oryd/ | d454c21c11bc | extraneous-detected | no fix listed | 1 |
| socialmediamacroscope/ | c5095e94bc65 | extraneous-detected | no fix listed | 1 |
| svtechnmaa/ | 1d71314424aa | extraneous-detected | no fix listed | 1 |