StackRadar

MAL-2022-4933

Critical

Advisory

Published 20 Jun 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
132
of 17,781 indexed, latest versions
Container images
134
deployed by those charts
Fix available
None
affected package

Malicious code in npm-cli-docs (npm)

Carried by container images the latest versions of 132 of 17,781 indexed charts deploy, on 134 images.

Affected packageAffected versionsFixed inImages
npm-cli-docsnpm0.1.0no fix listed134
OSV records
MAL-2022-4933
Also known as
GHSA-mwpr-cgch-q8vc

Charts affected

132 by stars
ChartLatestAffected imagesRadar Score
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

12,791
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

12,791
node-appnode-app-charts0.1.01 of 1See more

node-app node-app-charts 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
eameti/node-app:latestf36642affa86
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,444
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

27,465
ferdi-serverobeoneVerified publisher1.0.31 of 2See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
getferdi/ferdi-server:1.3.26e620b85afaa
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,866
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

9,968
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
openwhisk/alarmprovider:2.2.0b695a6ceb406
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

36,215
myappp4-helm0.1.02 of 6See more

myapp p4-helm 0.1.0

2 of the 6 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
npm-cli-docs@0.1.0
no fix listed
fjvela/urjc-fjvela-server:1.0.53c840aebce22
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

19,720
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

6,524
practica-helmpractica-helm0.1.02 of 7See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
npm-cli-docs@0.1.0
no fix listed
slagattollas/weatherservice-practica:latest68e7f56393fc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

28,484
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

15,520
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

29,227
jsonplaceholderrgnu1.0.01 of 1See more

jsonplaceholder rgnu 1.0.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
svenwal/jsonplaceholder:latestba2f285af432
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,547
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

5,215
jsonvisiorlex0.1.01 of 1See more

jsonvisio rlex 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
rlex/jsonvisio:1.9.5cd50ff65118e
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,100
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,909
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

5,582
simple-db-app-chartsimple-db-app0.1.01 of 2See more

simple-db-app-chart simple-db-app 0.1.0

1 of the 2 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,925
simple-db-app-chart-with-dependencysimple-db-app0.1.01 of 3See more

simple-db-app-chart-with-dependency simple-db-app 0.1.0

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,925
first-appsimple-helm-chart0.1.01 of 1See more

first-app simple-helm-chart 0.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
leeyoongti/first-app:1.0.021d66cb76352
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,154
alertmanager-to-alerta-botsomeblackmagic0.2.01 of 1See more

alertmanager-to-alerta-bot someblackmagic 0.2.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
someblackmagic/alertmanager-to-alerta-bot:latest78bf43744ea5
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,121
alert-mappersomeblackmagic0.2.01 of 1See more

alert-mapper someblackmagic 0.2.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
someblackmagic/alert-mapper:v0.1.088351d85c04c
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,890
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

11,554
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,881
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,827
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
denisshav/backend:latest4cc8dc5a4499
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

6,881
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

2,838
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

3,129
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ubercadence/web:v3.29.58564a5b44a6d
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

22,665
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry MAL-2022-4933.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
npm-cli-docs@0.1.0
no fix listed

Open the chart page →

1,752

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mojaloop/event-sidecar:v11.0.189b8ab71b74b
npm-cli-docs@0.1.0
no fix listed
5
oscarsotosanchez/server:v1.06e2e1279126b
npm-cli-docs@0.1.0
no fix listed
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
npm-cli-docs@0.1.0
no fix listed
4
dgraph/dgraph:v21.12.03b55ea83fffe
npm-cli-docs@0.1.0
no fix listed
3
frankescobar/allure-docker-service-ui:7.0.3:latest4ebd8b4ef340
npm-cli-docs@0.1.0
no fix listed
3
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
npm-cli-docs@0.1.0
no fix listed
3
pantsel/konga:latestc8172b75607d
npm-cli-docs@0.1.0
no fix listed
3
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
npm-cli-docs@0.1.0
no fix listed
2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
npm-cli-docs@0.1.0
no fix listed
2
governify/assets-manager:v1.4.12987672448c7
npm-cli-docs@0.1.0
no fix listed
2
governify/director:v1.4.0608c6940bb98
npm-cli-docs@0.1.0
no fix listed
2
governify/registry:v3.4.0d3f37f4f8168
npm-cli-docs@0.1.0
no fix listed
2
governify/render:v2.2.0daeca1ce28e6
npm-cli-docs@0.1.0
no fix listed
2
governify/reporter:v2.2.038595913458f
npm-cli-docs@0.1.0
no fix listed
2
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
npm-cli-docs@0.1.0
no fix listed
2
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
npm-cli-docs@0.1.0
no fix listed
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
npm-cli-docs@0.1.0
no fix listed
2
mesosphere/kommander:6.100.13917e82333a9
npm-cli-docs@0.1.0
no fix listed
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
npm-cli-docs@0.1.0
no fix listed
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
npm-cli-docs@0.1.0
no fix listed
2
moreillon/api-proxy:a3e8b41e9e578c9653b6
npm-cli-docs@0.1.0
no fix listed
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
npm-cli-docs@0.1.0
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
npm-cli-docs@0.1.0
no fix listed
2
adrianberger/fluxcd-webui:latest76848c0d2780
npm-cli-docs@0.1.0
no fix listed
1
assistiot/open_api_frontend:1.0.1f11d82defc70
npm-cli-docs@0.1.0
no fix listed
1
aureliengasser/http-folder:1.1.111c4318c2571
npm-cli-docs@0.1.0
no fix listed
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
npm-cli-docs@0.1.0
no fix listed
1
carbonetes/carbonetes-analyzer:1.0.31b9b93c9a37f
npm-cli-docs@0.1.0
no fix listed
1
cnieg/maildev:v1.1.998ee05668915
npm-cli-docs@0.1.0
no fix listed
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
npm-cli-docs@0.1.0
no fix listed
1
conduction/conduction-ui-app:devd591f5e6f2a9
npm-cli-docs@0.1.0
no fix listed
1
datarhei/restreamer:0.6.4655e12f9eeed
npm-cli-docs@0.1.0
no fix listed
1
davidvmar/urjc-davidvmar-external-service:1.0.02a68e9ac7f09
npm-cli-docs@0.1.0
no fix listed
1
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
npm-cli-docs@0.1.0
no fix listed
1
denisshav/backend:latest4cc8dc5a4499
npm-cli-docs@0.1.0
no fix listed
1
eameti/node-app:latestf36642affa86
npm-cli-docs@0.1.0
no fix listed
1
electerious/ackee:3.2.05e7173fa321c
npm-cli-docs@0.1.0
no fix listed
1
enketo/enketo-express:3.0.4dcad9c2273f6
npm-cli-docs@0.1.0
no fix listed
1
ethersphere/bzz-token-service:latest7624f11a72ad
npm-cli-docs@0.1.0
no fix listed
1
ethpandaops/blobscan-indexer:latestc58eb9ffe446
npm-cli-docs@0.1.0
no fix listed
1
fiware/idm:8.3.3a1b6ed4ae84f
npm-cli-docs@0.1.0
no fix listed
1
fiware/iotagent-ul:1.14.0fe11f55a926d
npm-cli-docs@0.1.0
no fix listed
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
npm-cli-docs@0.1.0
no fix listed
1
getferdi/ferdi-server:1.3.26e620b85afaa
npm-cli-docs@0.1.0
no fix listed
1
gethue/hue:4.11.011b649636e68
npm-cli-docs@0.1.0
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
npm-cli-docs@0.1.0
no fix listed
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
npm-cli-docs@0.1.0
no fix listed
1
gristlabs/grist:0.7.96e71b1914a7e
npm-cli-docs@0.1.0
no fix listed
1
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
npm-cli-docs@0.1.0
no fix listed
1
halkeye/hubot:latest9764d2202130
npm-cli-docs@0.1.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.