StackRadar

MAL-2022-4933

Critical

Advisory

Published 20 Jun 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
132
of 17,781 indexed, latest versions
Container images
134
deployed by those charts
Fix available
None
affected package

Malicious code in npm-cli-docs (npm)

Carried by container images the latest versions of 132 of 17,781 indexed charts deploy, on 134 images.

Affected packageAffected versionsFixed inImages
npm-cli-docsnpm0.1.0no fix listed134
OSV records
MAL-2022-4933
Also known as
GHSA-mwpr-cgch-q8vc

Charts affected

132 by stars
ChartLatestAffected imagesRadar Score
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

12,791
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

12,791
node-appnode-app-charts0.1.01 of 1See more

node-app node-app-charts 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
eameti/node-app:latestf36642affa86
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,444
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

27,465
ferdi-serverobeoneVerified publisher1.0.31 of 2See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
getferdi/ferdi-server:1.3.26e620b85afaa
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,866
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

9,968
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
openwhisk/alarmprovider:2.2.0b695a6ceb406
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

36,215
myappp4-helm0.1.02 of 6See more

myapp p4-helm 0.1.0

2 of the 6 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
npm-cli-docs@0.1.0
no fix listed
fjvela/urjc-fjvela-server:1.0.53c840aebce22
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

19,720
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

6,524
practica-helmpractica-helm0.1.02 of 7See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
npm-cli-docs@0.1.0
no fix listed
slagattollas/weatherservice-practica:latest68e7f56393fc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

28,484
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

15,520
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

29,227
jsonplaceholderrgnu1.0.01 of 1See more

jsonplaceholder rgnu 1.0.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
svenwal/jsonplaceholder:latestba2f285af432
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,547
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

5,215
jsonvisiorlex0.1.01 of 1See more

jsonvisio rlex 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
rlex/jsonvisio:1.9.5cd50ff65118e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,100
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,909
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

5,582
simple-db-app-chartsimple-db-app0.1.01 of 2See more

simple-db-app-chart simple-db-app 0.1.0

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,925
simple-db-app-chart-with-dependencysimple-db-app0.1.01 of 3See more

simple-db-app-chart-with-dependency simple-db-app 0.1.0

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,925
first-appsimple-helm-chart0.1.01 of 1See more

first-app simple-helm-chart 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
leeyoongti/first-app:1.0.021d66cb76352
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,154
alertmanager-to-alerta-botsomeblackmagic0.2.01 of 1See more

alertmanager-to-alerta-bot someblackmagic 0.2.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
someblackmagic/alertmanager-to-alerta-bot:latest78bf43744ea5
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,121
alert-mappersomeblackmagic0.2.01 of 1See more

alert-mapper someblackmagic 0.2.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
someblackmagic/alert-mapper:v0.1.088351d85c04c
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,890
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,554
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,881
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,827
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
denisshav/backend:latest4cc8dc5a4499
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

6,881
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,838
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,129
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ubercadence/web:v3.29.58564a5b44a6d
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

22,665
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,752

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
haveagitgat/tdarr_node:2.00.101e3f9328327d
npm-cli-docs@0.1.0
no fix listed
1
hhaluk/crypto-watchdog:0.4.0a6555953d941
npm-cli-docs@0.1.0
no fix listed
1
i4trust/pdc-portal:2.0.03e77858e1219
npm-cli-docs@0.1.0
no fix listed
1
ianw/quickchart:v1.7.1dc49dd460c37
npm-cli-docs@0.1.0
no fix listed
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
npm-cli-docs@0.1.0
no fix listed
1
improwised/erpnext-worker:v13.4.197280b55cbd4
npm-cli-docs@0.1.0
no fix listed
1
istio/examples-bookinfo-ratings-v1:1.17.0b6a6b88d3578
npm-cli-docs@0.1.0
no fix listed
1
jayfong/yapi:1.10.2163e5d621910
npm-cli-docs@0.1.0
no fix listed
1
junktext/getting-started:1.0.5a70936c04aed
npm-cli-docs@0.1.0
no fix listed
1
junktext/getting-started:1.0.34d44adf5a4da2
npm-cli-docs@0.1.0
no fix listed
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
npm-cli-docs@0.1.0
no fix listed
1
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
npm-cli-docs@0.1.0
no fix listed
1
kubevious/parser:1.0.151acf1a1f0b47
npm-cli-docs@0.1.0
no fix listed
1
kvalitetsit/kithosting-networkpolicytests:0.0.12b99cfa3c5df
npm-cli-docs@0.1.0
no fix listed
1
leeyoongti/first-app:1.0.021d66cb76352
npm-cli-docs@0.1.0
no fix listed
1
library/ghost:4.37.0767230c0f263
npm-cli-docs@0.1.0
no fix listed
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
npm-cli-docs@0.1.0
no fix listed
1
linuxserver/codimd:latestb801bbcf6386
npm-cli-docs@0.1.0
no fix listed
1
lsstsqre/squareone:0.4.09ded78e7fe03
npm-cli-docs@0.1.0
no fix listed
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
npm-cli-docs@0.1.0
no fix listed
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
npm-cli-docs@0.1.0
no fix listed
1
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
npm-cli-docs@0.1.0
no fix listed
1
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
npm-cli-docs@0.1.0
no fix listed
1
mozilla/sentencecollector:2.0.91da6ff5c4895
npm-cli-docs@0.1.0
no fix listed
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
npm-cli-docs@0.1.0
no fix listed
1
nodered/node-red:2.2.2e131dcadfe92
npm-cli-docs@0.1.0
no fix listed
1
openproject/community:12.0.2734743d11094
npm-cli-docs@0.1.0
no fix listed
1
openwhisk/alarmprovider:2.2.0b695a6ceb406
npm-cli-docs@0.1.0
no fix listed
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
npm-cli-docs@0.1.0
no fix listed
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
npm-cli-docs@0.1.0
no fix listed
1
phntom/camo:2.3.1a9b1304d6c71
npm-cli-docs@0.1.0
no fix listed
1
phntom/codimd:2.4.31b9aafbb62e6
npm-cli-docs@0.1.0
no fix listed
1
project2team4/react:latest3ff031a08887
npm-cli-docs@0.1.0
no fix listed
1
rakii8585/angular-node-webapp:latest026082a515ac
npm-cli-docs@0.1.0
no fix listed
1
requarks/wiki:canary-2.5.2438b5865a7386c
npm-cli-docs@0.1.0
no fix listed
1
rlex/jsonvisio:1.9.5cd50ff65118e
npm-cli-docs@0.1.0
no fix listed
1
roadiehq/community-backstage-image:latestef355bf5b639
npm-cli-docs@0.1.0
no fix listed
1
robotshop/rs-cart:latest388349d5cb3c
npm-cli-docs@0.1.0
no fix listed
1
robotshop/rs-catalogue:latestd545747c1b97
npm-cli-docs@0.1.0
no fix listed
1
robotshop/rs-user:latestea509182c180
npm-cli-docs@0.1.0
no fix listed
1
shahanafarooqui/rtl:0.11.0d0cd3d868aca
npm-cli-docs@0.1.0
no fix listed
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
npm-cli-docs@0.1.0
no fix listed
1
slagattollas/server-practica:latest6dd8ead8e2b1
npm-cli-docs@0.1.0
no fix listed
1
slagattollas/weatherservice-practica:latest68e7f56393fc
npm-cli-docs@0.1.0
no fix listed
1
someblackmagic/alertmanager-to-alerta-bot:latest78bf43744ea5
npm-cli-docs@0.1.0
no fix listed
1
someblackmagic/alert-mapper:v0.1.088351d85c04c
npm-cli-docs@0.1.0
no fix listed
1
sqlpad/sqlpad:6.7d3d2f430dffd
npm-cli-docs@0.1.0
no fix listed
1
stanfordoval/almond-server:latest1a63cdccedaf
npm-cli-docs@0.1.0
no fix listed
1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
npm-cli-docs@0.1.0
no fix listed
1
subsquid/hydra-indexer-status-service:5.0.0-alpha.37a4136013909c
npm-cli-docs@0.1.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.