MAL-2025-147616 Malicious code in sagitta-relay-soap-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af375c1cc7e3d5daa24087f91e3a575c2cc62fd208b8c08caabf86453888112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140495 Malicious code in castor-soap-venus-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810db938434e1cce2fdb25f62d0c2a9fa081469eaffe65a318919342e0a74e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142370 Malicious code in express-cassini-warp-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd22234b7a86537f1ae17969398bec86c8f6bda4b4fed0732595138012dbb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140631 Malicious code in chakra-ui-vega-express-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c0df3b2ac23be1e355e72eb882ad33832dee620205b49d584c3786346b4f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120966

Malicious code in uninstall-octans-procyon-soap npm...

EUVD-2025-121890

Malicious code in soap-spica-gemini-ganymede npm...

EUVD-2025-121893

Malicious code in soap-promise-kronos-nextjs npm...

Malicious code in io-gacrux-test-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146490badaa1b12611a8763498d0c26ee5d80e1f64f417b1d5b7cc98eeeaabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121894

Malicious code in soap-postcss-kaus-concurrently npm...

EUVD-2025-120461

Malicious code in wezen-soap-grus-framework npm...

MAL-2025-144227 Malicious code in kronos-soap-mongoose-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2a7487eb0f4716eb5160cc1c8d601510a3fadcc5d74c85426652aaf1df9303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122874

Malicious code in rate-limiter-soap-colors-testcafe npm...

MAL-2025-148030 Malicious code in soap-pavo-terser-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ffff8cf6a504a54d7a9a9b8193efbb4dfc00ae43a56bc384e678ccea487576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112256

Malicious code in jasmine-meissa-soap-protractor npm...

MAL-2025-148021 Malicious code in soap-hermes-farout-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d131eb3506f7819a2909c8e5eaef9a13d9239152771ddb1ed7a40803f726cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-taurus-alphard-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1d5f090be809b21c5b50628f723d4f107765b7e01ff6e0a5a790938b79adaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143857 Malicious code in jasmine-meissa-soap-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6109c4527fbe0c61110df548c7dd0fedf4f49d33856b8df215dc9363bbd0b512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114177

Malicious code in electron-soap-magellan-heka npm...

CVE-2025-10907

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the...

CVE-2025-10907

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the...