StackRadar

MAL-2022-4933

Critical

Advisory

Published 20 Jun 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
132
of 17,781 indexed, latest versions
Container images
134
deployed by those charts
Fix available
None
affected package

Malicious code in npm-cli-docs (npm)

Carried by container images the latest versions of 132 of 17,781 indexed charts deploy, on 134 images.

Affected packageAffected versionsFixed inImages
npm-cli-docsnpm0.1.0no fix listed134
OSV records
MAL-2022-4933
Also known as
GHSA-mwpr-cgch-q8vc

Charts affected

132 by stars
ChartLatestAffected imagesRadar Score
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

12,791
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

12,791
node-appnode-app-charts0.1.01 of 1See more

node-app node-app-charts 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
eameti/node-app:latestf36642affa86
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,444
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

27,465
ferdi-serverobeoneVerified publisher1.0.31 of 2See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
getferdi/ferdi-server:1.3.26e620b85afaa
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,866
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

9,968
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
openwhisk/alarmprovider:2.2.0b695a6ceb406
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

36,215
myappp4-helm0.1.02 of 6See more

myapp p4-helm 0.1.0

2 of the 6 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
npm-cli-docs@0.1.0
no fix listed
fjvela/urjc-fjvela-server:1.0.53c840aebce22
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

19,720
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

6,524
practica-helmpractica-helm0.1.02 of 7See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
npm-cli-docs@0.1.0
no fix listed
slagattollas/weatherservice-practica:latest68e7f56393fc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

28,484
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

15,520
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

29,227
jsonplaceholderrgnu1.0.01 of 1See more

jsonplaceholder rgnu 1.0.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
svenwal/jsonplaceholder:latestba2f285af432
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,547
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

5,215
jsonvisiorlex0.1.01 of 1See more

jsonvisio rlex 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
rlex/jsonvisio:1.9.5cd50ff65118e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,100
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,909
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

5,582
simple-db-app-chartsimple-db-app0.1.01 of 2See more

simple-db-app-chart simple-db-app 0.1.0

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,925
simple-db-app-chart-with-dependencysimple-db-app0.1.01 of 3See more

simple-db-app-chart-with-dependency simple-db-app 0.1.0

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,925
first-appsimple-helm-chart0.1.01 of 1See more

first-app simple-helm-chart 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
leeyoongti/first-app:1.0.021d66cb76352
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,154
alertmanager-to-alerta-botsomeblackmagic0.2.01 of 1See more

alertmanager-to-alerta-bot someblackmagic 0.2.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
someblackmagic/alertmanager-to-alerta-bot:latest78bf43744ea5
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,121
alert-mappersomeblackmagic0.2.01 of 1See more

alert-mapper someblackmagic 0.2.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
someblackmagic/alert-mapper:v0.1.088351d85c04c
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,890
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,554
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,881
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,827
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
denisshav/backend:latest4cc8dc5a4499
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

6,881
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,838
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,129
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ubercadence/web:v3.29.58564a5b44a6d
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

22,665
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,752

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
svenwal/jsonplaceholder:latestba2f285af432
npm-cli-docs@0.1.0
no fix listed
1
taigaio/taiga-events:6.4.00bf2d24a57d9
npm-cli-docs@0.1.0
no fix listed
1
temporalio/web:1.14.033cfa863d8ce
npm-cli-docs@0.1.0
no fix listed
1
thelounge/thelounge:4.2.0-alpine639978459c3a
npm-cli-docs@0.1.0
no fix listed
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
npm-cli-docs@0.1.0
no fix listed
1
tvanro/prerender-alpine:6.4.06909015f0328
npm-cli-docs@0.1.0
no fix listed
1
ubercadence/web:v3.29.58564a5b44a6d
npm-cli-docs@0.1.0
no fix listed
1
wekanteam/wekan:v4.2268a51f0327df
npm-cli-docs@0.1.0
no fix listed
1
ymuski/skooner:latest67819ca511b5
npm-cli-docs@0.1.0
no fix listed
1
zazuko/trifid:2.3.7054be137de70
npm-cli-docs@0.1.0
no fix listed
1
zooz/predator:1.6f491d1f7a865
npm-cli-docs@0.1.0
no fix listed
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
npm-cli-docs@0.1.0
no fix listed
1
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/leoquote/mergeable:latest451706815103
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/mmontes11/iot-thing:v3.11.0542e91e8499c
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/mmontes11/iot-worker:v3.11.0491bb243f555
npm-cli-docs@0.1.0
no fix listed
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
npm-cli-docs@0.1.0
no fix listed
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
npm-cli-docs@0.1.0
no fix listed
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
npm-cli-docs@0.1.0
no fix listed
1
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
npm-cli-docs@0.1.0
no fix listed
1
quay.io/ibmgaragecloud/slack-notifications:latest041df93e2bac
npm-cli-docs@0.1.0
no fix listed
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
npm-cli-docs@0.1.0
no fix listed
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
npm-cli-docs@0.1.0
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
npm-cli-docs@0.1.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.