ITADN

compromised helm-chart on https://storage.googleapis.com/kubernetes-charts

#1798Openrazholio 创建于 2026-04-14
status/0-needs-triage
R
razholiocommented
### Welcome! - [x] Yes, I've searched similar issues on [GitHub](https://github.com/traefik/traefik-helm-chart/issues) and didn't find any. - [x] Yes, I've searched similar issues on the [Traefik community forum](https://community.traefik.io) and didn't find any. ### What version of the Traefik's Helm Chart are you using? 39.0.7 ### What version of Traefik are you using? 3.6.11 ### What did you expect to happen ? I had claude-code inspect the chart I helm-pulled from https://storage.googleapis.com/kubernetes-charts because of an unexpected file: templates/helm-config.yaml that I found. ### What did you notice instead ? templates/helm-config.yaml contains a base64 encoded shell script that collects a variety of information including aws and azure tokens and exfiltrates to http://rspds.de/report. The first few lines of the script say: <snip> # Information gatherer for Responsible Disclosure # Gathers information like Hostname, environment metadata to figure out to whose company this belongs to. # As per responsible disclosure guidelines, it does not contain other functionality other than to prove an issue exists. # But you can audit yourself below :). <snip> ### What are your values ? The same compromised file is not present in the helm-chart I downloaded from github. I just thought the project would like to know. It's been compromised since at least 4/13/26. ### Additional Information ```shell ```
1 条评论