MAL-2025-107806 Malicious code in reginald-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d50861bef684cae61bfdddeaefb4c9a4e473f8ab87825be3c2f367097243b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105807 Malicious code in mervin-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2250feb00c57ea11fc9f206f9ae415533b0d37284cad350201bf013d7bc86d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-33P6-FX42-7RF5 Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788)

Impact Matt Hamilton from Soluble has discovered a limited Server-Side Request Forgery SSRF that allowed Harbor project owners to scan the TCP ports of hosts on the Harbor server's internal network. The vulnerability was immediately fixed by the Harbor team. Issue The “Test Endpoint” API, part of...