CVE-2026-54786

Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those before 36.0.11; versions 37.0.0 through those before 44.0.3; and versions 45.0.0 and 45.0.1 contain a native implementation of WASIp1 which suffers from a leak in the fdrenumber function where the...

Malicious code in only-tomato-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc87ed6f0f3019f6c23d86db67be6d7b912477d56ea8b23667d8c250f6efe692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123808 Malicious code in umi-kue89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de10bc5fdc611bf2396b2bbcfceb95e93d541c3ff8b3b2ded0e920775b8bd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...