compromised helm-chart on https://storage.googleapis.com/kubernetes-charts
status/0-needs-triage
### Welcome!
- [x] Yes, I've searched similar issues on [GitHub](https://github.com/traefik/traefik-helm-chart/issues) and didn't find any.
- [x] Yes, I've searched similar issues on the [Traefik community forum](https://community.traefik.io) and didn't find any.
### What version of the Traefik's Helm Chart are you using?
39.0.7
### What version of Traefik are you using?
3.6.11
### What did you expect to happen ?
I had claude-code inspect the chart I helm-pulled from https://storage.googleapis.com/kubernetes-charts because of an unexpected file: templates/helm-config.yaml that I found.
### What did you notice instead ?
templates/helm-config.yaml contains a base64 encoded shell script that collects a variety of information including aws and azure tokens and exfiltrates to http://rspds.de/report. The first few lines of the script say:
<snip>
# Information gatherer for Responsible Disclosure
# Gathers information like Hostname, environment metadata to figure out to whose company this belongs to.
# As per responsible disclosure guidelines, it does not contain other functionality other than to prove an issue exists.
# But you can audit yourself below :).
<snip>
### What are your values ?
The same compromised file is not present in the helm-chart I downloaded from github. I just thought the project would like to know. It's been compromised since at least 4/13/26.
### Additional Information
```shell
```
1 条评论