Malicious code in aurora-sync-buffer-canopus (npm)

Source: amazon-inspector 76b4ed240221e294fa55d34536228a20e0a7f3ca8a80a0e59f3caa86531c263d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-180232

Malicious code in aurora-sync-buffer-canopus npm...

SUSE CVE-2017-14406

A NULL pointer dereference was discovered in syncbuffer in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

DEBIAN-CVE-2017-14406

A NULL pointer dereference was discovered in syncbuffer in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

PT-2017-13449

Name of the Vulnerable Software and Affected Versions MP3Gain version 1.5.2 Description A NULL pointer dereference was discovered in the sync buffer function in interface.c in mpglibDBL, which is used in MP3Gain. This issue causes a segmentation fault and application crash, leading to a remote...