EUVD-2025-120180

Malicious code in xo-metalsmith-soap-yakutsk npm...

Malicious code in soap-pavo-terser-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ffff8cf6a504a54d7a9a9b8193efbb4dfc00ae43a56bc384e678ccea487576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-gacrux-test-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146490badaa1b12611a8763498d0c26ee5d80e1f64f417b1d5b7cc98eeeaabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121909

Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...

EUVD-2025-120670

Malicious code in vulcan-vortex-soap-xanadu npm...

EUVD-2025-121889

Malicious code in soap-style-loader-eris-rate-limiter npm...

EUVD-2025-122739

Malicious code in rehype-run-script-soap-process npm...

EUVD-2025-121888

Malicious code in soap-taurus-alphard-await npm...

EUVD-2025-112882

Malicious code in helios-europa-soap-europa npm...

EUVD-2025-123993

Malicious code in package-dorado-soap-docusaurus npm...

EUVD-2025-115932

Malicious code in buffer-soap-vortex-mini-css-extract-plugin npm...

EUVD-2025-113386

Malicious code in fusion-callback-soap-markdownlint npm...

EUVD-2025-124290

Malicious code in non-blocking-writable-soap-element-ui npm...

EUVD-2025-111193

Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap npm...

EUVD-2025-120999

Malicious code in umbra-octans-soap-jekyll npm...

EUVD-2025-113487

Malicious code in fornax-hermes-soap-eleventy npm...

CVE-2025-10907

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the...

CVE-2025-10907

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the...

CVE-2025-10907 Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the...

EUVD-2025-37942

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the...