StackRadar

MAL-2022-4933

Critical

Advisory

Published 20 Jun 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
132
of 17,781 indexed, latest versions
Container images
134
deployed by those charts
Fix available
None
affected package

Malicious code in npm-cli-docs (npm)

Carried by container images the latest versions of 132 of 17,781 indexed charts deploy, on 134 images.

Affected packageAffected versionsFixed inImages
npm-cli-docsnpm0.1.0no fix listed134
OSV records
MAL-2022-4933
Also known as
GHSA-mwpr-cgch-q8vc

Charts affected

132 by stars
ChartLatestAffected imagesRadar Score
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,213
carbonetes-analyzercarbonetes-analyzerVerified publisher1.0.61 of 1See more

carbonetes-analyzer carbonetes-analyzer 1.0.6

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
carbonetes/carbonetes-analyzer:1.0.31b9b93c9a37f
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,829
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

52,919
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

8,213
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

96,941
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
taigaio/taiga-events:6.4.00bf2d24a57d9
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

7,255
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

22,773
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

5,209
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

18,517
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,851
fluxcd-webuiccowleyVerified publisher0.0.21 of 2See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
adrianberger/fluxcd-webui:latest76848c0d2780
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,509
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

4,260
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

4,405
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,444
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.00.101e3f9328327d
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

31,000
zigbee2mqttgeek-cookbookVerified publisher9.4.21 of 1See more

zigbee2mqtt geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,173
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

6,810
pdc-portali4trustVerified publisher2.3.21 of 1See more

pdc-portal i4trust 2.3.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
i4trust/pdc-portal:2.0.03e77858e1219
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,723
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,369
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.12 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

2 of the 6 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
npm-cli-docs@0.1.0
no fix listed
fjvela/urjc-fjvela-server:1.0.53c840aebce22
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

19,187
camophntom0.1.11 of 1See more

camo phntom 0.1.1

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
phntom/camo:2.3.1a9b1304d6c71
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,217
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,602
prerenderutkuozdemirVerified publisher1.1.21 of 1See more

prerender utkuozdemir 1.1.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
tvanro/prerender-alpine:6.4.06909015f0328
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,660
restreamerutkuozdemirVerified publisher1.1.01 of 1See more

restreamer utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
datarhei/restreamer:0.6.4655e12f9eeed
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,598
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

25,443
allure-docker-helm-chartallure-service-chartVerified publisher0.1.01 of 2See more

allure-docker-helm-chart allure-service-chart 0.1.0

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service-ui:latest4ebd8b4ef340
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,647
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,237
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,616
d.vazquezm.2021_helmapphelmVerified publisher1.0.02 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-external-service:1.0.02a68e9ac7f09
npm-cli-docs@0.1.0
no fix listed
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

19,745
trifidappuio2.0.21 of 1See more

trifid appuio 2.0.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
zazuko/trifid:2.3.7054be137de70
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,783
openapiassist-iot-open-api-management0.2.22 of 6See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
npm-cli-docs@0.1.0
no fix listed
pantsel/konga:latestc8172b75607d
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

18,277
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

7,152
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.17.0b6a6b88d3578
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

20,671
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

22,891
robot-shopcloud-native-toolkit1.1.13 of 12See more

robot-shop cloud-native-toolkit 1.1.1

3 of the 12 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
robotshop/rs-cart:latest388349d5cb3c
npm-cli-docs@0.1.0
no fix listed
robotshop/rs-catalogue:latestd545747c1b97
npm-cli-docs@0.1.0
no fix listed
robotshop/rs-user:latestea509182c180
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

29,555
setup-jobcloud-native-toolkit0.3.01 of 2See more

setup-job cloud-native-toolkit 0.3.0

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,792
slack-notificationscloud-native-toolkit0.1.71 of 1See more

slack-notifications cloud-native-toolkit 0.1.7

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/slack-notifications:latest041df93e2bac
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,545
maildevcnieg1.1.11 of 1See more

maildev cnieg 1.1.1

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
cnieg/maildev:v1.1.998ee05668915
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,449
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

12,907
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

5,488
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

5,209
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,909
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,909
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
npm-cli-docs@0.1.0
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

27,550
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

4,223
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.02 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
npm-cli-docs@0.1.0
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

24,656
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
npm-cli-docs@0.1.0
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
npm-cli-docs@0.1.0
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

27,256
blobscan-indexerethereum-helm-chartsVerified publisher0.1.11 of 1See more

blobscan-indexer ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ethpandaops/blobscan-indexer:latestc58eb9ffe446
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,114

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
svenwal/jsonplaceholder:latestba2f285af432
npm-cli-docs@0.1.0
no fix listed
1
taigaio/taiga-events:6.4.00bf2d24a57d9
npm-cli-docs@0.1.0
no fix listed
1
temporalio/web:1.14.033cfa863d8ce
npm-cli-docs@0.1.0
no fix listed
1
thelounge/thelounge:4.2.0-alpine639978459c3a
npm-cli-docs@0.1.0
no fix listed
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
npm-cli-docs@0.1.0
no fix listed
1
tvanro/prerender-alpine:6.4.06909015f0328
npm-cli-docs@0.1.0
no fix listed
1
ubercadence/web:v3.29.58564a5b44a6d
npm-cli-docs@0.1.0
no fix listed
1
wekanteam/wekan:v4.2268a51f0327df
npm-cli-docs@0.1.0
no fix listed
1
ymuski/skooner:latest67819ca511b5
npm-cli-docs@0.1.0
no fix listed
1
zazuko/trifid:2.3.7054be137de70
npm-cli-docs@0.1.0
no fix listed
1
zooz/predator:1.6f491d1f7a865
npm-cli-docs@0.1.0
no fix listed
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
npm-cli-docs@0.1.0
no fix listed
1
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/leoquote/mergeable:latest451706815103
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/mmontes11/iot-thing:v3.11.0542e91e8499c
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/mmontes11/iot-worker:v3.11.0491bb243f555
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
npm-cli-docs@0.1.0
no fix listed
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
npm-cli-docs@0.1.0
no fix listed
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
npm-cli-docs@0.1.0
no fix listed
1
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
npm-cli-docs@0.1.0
no fix listed
1
quay.io/ibmgaragecloud/slack-notifications:latest041df93e2bac
npm-cli-docs@0.1.0
no fix listed
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
npm-cli-docs@0.1.0
no fix listed
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
npm-cli-docs@0.1.0
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
npm-cli-docs@0.1.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.