MAL-2025-189486 Malicious code in sigma-class-new-root-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fbeea5b52e1afb7cd1f89ed2cce35cb4dcb3522c66c0a9d069daa9a5422c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

shopify-scripts: Segmentation fault when a Ruby method is invoked by a C method via Object#send

We can arrange for C to call Objectsend by aliasing it over initialize. This will cause Classnew a C function to call initialize which is actually Objectsend with arbitrary arguments. If we invoke a Ruby method through Objectsend, mruby segfaults: def foo end class X aliasmethod :initialize, :sen...