CVE-2019-18796

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile Denial of Service vulnerability infinite loop via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive...

CVE-2019-18794

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit this to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service...

CVE-2019-18795

The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of servic...

EUVD-2025-117193

Malicious code in old-bronze-bass npm...

EUVD-2025-117396

Malicious code in experimental-brown-bass npm...

EUVD-2025-101899

Malicious code in tastybassz3n npm...

Malicious code in mad_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fc28ee000ebddc3679dd99761ed6b7dad07cc17b6e03a33476fc5e73405346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b8c0c8b1de839e5b11a0d62639ce59c070f5a8b566318f654a9bbbe8a17d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zippy_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c002b4a3d86ee9902a01349076a76d59f7e327a028ed461c480a4a41913a4c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-96423

Malicious code in multiplebassz3n npm...

EUVD-2025-105696

Malicious code in dyingbassz3n npm...

EUVD-2025-92649

Malicious code in criminalbassz3n npm...

EUVD-2025-91051

Malicious code in internalbassz3n npm...

EUVD-2025-90128

Malicious code in massivebassz3n npm...

MAL-2025-114833 Malicious code in internal_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a22ef1824bf645e1bbccf5f5c752cc8dd8e13deef6e39b1ad1ea3065a9e39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74356

Malicious code in possiblebassmoccasin-68 npm...

EUVD-2025-74204

Malicious code in spotlessbasspink-38 npm...

EUVD-2025-76721

Malicious code in greatbass-appteadev npm...

EUVD-2025-75215

Malicious code in wilfulbass-appteadev npm...

EUVD-2025-75074

Malicious code in addedbass-silentdev npm...