MAL-2025-181264 Malicious code in @akunsansan0/jorelat16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca45b312a3df905e4255e13fa493405d6cbe6bcb0a5b9927d1c42baf3d23dd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181326 Malicious code in @akunsansan0/pucuk12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b214b0cc1b7c6e26dd715953103a2c0c0bbe764a343f4e86757ea2b04b8bd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c04a9237f85fe2bf4a8b6fcb2ff46969bc4f164bf850137ffe3324ced69f4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181519 Malicious code in roti13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bff30ecf8de84fa98fefe9617c7acc1b424e8c5328ed7551e432ba8c22e61cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181197 Malicious code in @akunsansan0/biru12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3972e8764ce7f53cba77dab94d5e127eab25ad82c7b45ee0825fb8da729f55e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181467 Malicious code in cewe14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb6d54224554ffbb5bbd360c1dfe3b6b3dfbd3f85150047bb65d8679eee6eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70737668630f93820f229e54051acbeec29cc2c6927298206dc6739b12b06db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec41ca60a53945b53d95e51ea049918914f0071f4575b4a8a9c890ff6bd819df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181297 Malicious code in @akunsansan0/karedok27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88f9f6ae790f692971eb095f3225b17fe20285be72e10394c675d365f8fbfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181441 Malicious code in baso81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6b7651f46986b656741d0f4804751981aebbd24718f11d523b1de51b03eb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181317 Malicious code in @akunsansan0/karedok9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0844f9ae856d5c7d2c514c910360a6844f96b7c26b43fff9e274975278de17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181323 Malicious code in @akunsansan0/kopi8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df09c5bcf7eece7b9b2e3dcabfb5cc51bca8556d0474858d0802360f3136fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64429

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

Malicious code in teate-thy-sonic-nezmuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99e5b01c8f93607f328d9d667abd7d3cee803f4de37bba34222033b41ed65ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-jetla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa93f428d0da3db91d89247849da683a0188eef1378e8e82a12176ed55728a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-gojig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cfaaa4a5c2058237e55ad67da76cf9a59ca2b44e1bafae8925c2f658e1bacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faig-avuffigufufuib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8a2543f29554b78a355635e5c5547cca999a761334d74645c197142acb8504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-roci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812871633648c28932315ef90c7c3be69cd1926a3e552af45f7645cec8512466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-muvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3aa495fd8791c8f9bfc30cdb9972eb3da71111202ff5d864b1096e7f24a9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...