MAL-2025-181670 Malicious code in astam-ift-digokiusnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889d974931aff47f824794d8812226e5ed5cdc233e59142502e2b065dd24ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183619 Malicious code in lomi-ifush-ugofalifufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86167b4c74de89854397ebea7ca70b7abf2e44ef1e4e59ff6cbfb7555b6f2b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183016 Malicious code in itale-dci-rrusysyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42093684a00b5d297d4b3b23901d99c50a178355920d27359621806336f66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181903 Malicious code in avarag-obis-bidabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63893b5c2dc03b3b9cca4ad46bbaf7b0b797fb878b8cff9509029f9f050e2d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183390 Malicious code in lobac-ub-jfggafuayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9076f49c6c9f666dc23a2461eea220abf8b06e1dd3cb2007bd1b0f5a59dbf1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183345 Malicious code in liobc-ug-afayafuycig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0a6acdacd00e92ac314d37f5f4767ad48afbc0d5b961565bdb68c7cf4c5ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182529 Malicious code in imuay-agg-iguqakuraduidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a7d13ce843aa7f030274cef8c837093afb41ba64c298cc675d96117b403183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182504 Malicious code in imodiov-omfi-cafacevavisvoetfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcdcdc5e94b455ca0c3a1f56aef24e0d1bc1137b29712f26e5e0eacc2687bc92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185237 Malicious code in soniec-kat-icfad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c53a1a9ca9169b38fbc0e3e0a1b8f201c786a7644895e9c2f35cb2f0689fbe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183977 Malicious code in mitok-don-olialobsina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebd5d145b696dadf2cc3c8754e55d90edbefdc7a34c35514e4bc5c7978c960f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181967 Malicious code in flights-lutag-obolavduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276b04782d149811dc9305d2ecfbd7c083261dd68276b4e37f93efdb1c8a0d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184607 Malicious code in odasv-knilu-bofvaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7d2949ae9fd03faad8cc1d3644f423b4136e154dfddd6eadaadaf8fb424b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183141 Malicious code in item-atim-kubuskuaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b422a40e06f0b263bcc4348df3c6a6ed30ec3d8331a38ce649a52ae134755b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181710 Malicious code in astam-ifut-dakaknuiloaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 735f5673fc298bca6b8872811f3f17792ffd237f1e44806b3d21529bdb30e9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182838 Malicious code in itale-adci-ggmatondanggangtengyru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a624d4acf285fbc49a2d31c19b3398d1e6386fbb05779e7282f4ead937e79f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184435 Malicious code in modiov-kin-afbauc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2196265320c3dbda5e7d57cd910345766d9b11d01829090b882429b85622278e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184057 Malicious code in mitokoik-oni-oladis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac88bbccdbeddf60c68bd4570d41b4c27c83399d21fc4f0ce1980e455c0f240f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PYSEC-2025-112

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

Malicious code in @akunsansan0/susu3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a264ee9b1d2e14f156e15f51cb63b5c64be9f585a8676184698794f7c8a281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d9c1fb43b93059d24ad0598bc636e7b55ca4614303cd93a78edb37f0da9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...