MAL-2025-142370 Malicious code in express-cassini-warp-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd22234b7a86537f1ae17969398bec86c8f6bda4b4fed0732595138012dbb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144227 Malicious code in kronos-soap-mongoose-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2a7487eb0f4716eb5160cc1c8d601510a3fadcc5d74c85426652aaf1df9303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140495 Malicious code in castor-soap-venus-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810db938434e1cce2fdb25f62d0c2a9fa081469eaffe65a318919342e0a74e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112256

Malicious code in jasmine-meissa-soap-protractor npm...

EUVD-2025-111484

Malicious code in magellan-deneb-schema-soap npm...

EUVD-2025-120966

Malicious code in uninstall-octans-procyon-soap npm...

EUVD-2025-120180

Malicious code in xo-metalsmith-soap-yakutsk npm...

MAL-2025-143857 Malicious code in jasmine-meissa-soap-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6109c4527fbe0c61110df548c7dd0fedf4f49d33856b8df215dc9363bbd0b512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148030 Malicious code in soap-pavo-terser-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ffff8cf6a504a54d7a9a9b8193efbb4dfc00ae43a56bc384e678ccea487576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140631 Malicious code in chakra-ui-vega-express-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c0df3b2ac23be1e355e72eb882ad33832dee620205b49d584c3786346b4f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147619 Malicious code in sagitta-soap-jabbah-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce1eac91ce5b3dd1ba6b6ad4dc0e56d557a5b7264db95f7ee63c57767b13c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148021 Malicious code in soap-hermes-farout-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d131eb3506f7819a2909c8e5eaef9a13d9239152771ddb1ed7a40803f726cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147616 Malicious code in sagitta-relay-soap-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af375c1cc7e3d5daa24087f91e3a575c2cc62fd208b8c08caabf86453888112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121890

Malicious code in soap-spica-gemini-ganymede npm...

CVE-2025-10907

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the...

CVE-2025-10907

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the...

EUVD-2025-37942

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the...

CVE-2025-10907

CVE-2025-10907 describes an arbitrary file upload vulnerability in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a crafted file to a user-controlled location within the ...

CVE-2025-10907 Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the...

DELMIA Apriso Missing Authorization Vulnerability (CVE-2025-6205)

The version of DELMIA Apriso installed on the remote host is Release 2020 through Release 2025. It is, therefore, affected by a missing authorization vulnerability CVE-2025-6205 that could allow an attacker to gain privileged access to the application. Exploitation can be achieved by sending...