SUSE CVE-2026-29022

drlibs drwav.h version 0.14.4 and earlier fixed in commit 8a7258c contain a heap buffer overflow vulnerability in the drwavreadsmpltometadataobj function of drwav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 a...

Malicious code in mahnud-magfu-gommia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd99ec80f0ae44d095aaa663fd15ae8ebbc9c8357bfb2b4f94c14c0bf3c540a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118424 Malicious code in zaki-ikan18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2965912b0d6e2ef3f22bff193a59ce4b3d4c32b3c1e6317541f342c17ea4309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-ragi94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de550818a4a10d98c51ef08d679dda0de581b4815e30f61718b3663c1b270bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57260 Malicious code in kurniawan-ketan69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdb430549da25a589f59482a419fe13450857b9a5a8f8c9f717d0ccab332ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kue52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60afc107b0512e2f701e01207e3bfca50ce59b0fcfb53bd826d8355034fdc19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53020 Malicious code in joko-oncom33-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876d9917443450503834fe62bf839123776c0d5477a02cb86abffb73967e2470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...