MAL-2025-181323 Malicious code in @akunsansan0/kopi8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df09c5bcf7eece7b9b2e3dcabfb5cc51bca8556d0474858d0802360f3136fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181197 Malicious code in @akunsansan0/biru12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3972e8764ce7f53cba77dab94d5e127eab25ad82c7b45ee0825fb8da729f55e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181297 Malicious code in @akunsansan0/karedok27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88f9f6ae790f692971eb095f3225b17fe20285be72e10394c675d365f8fbfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181317 Malicious code in @akunsansan0/karedok9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0844f9ae856d5c7d2c514c910360a6844f96b7c26b43fff9e274975278de17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181264 Malicious code in @akunsansan0/jorelat16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca45b312a3df905e4255e13fa493405d6cbe6bcb0a5b9927d1c42baf3d23dd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec41ca60a53945b53d95e51ea049918914f0071f4575b4a8a9c890ff6bd819df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70737668630f93820f229e54051acbeec29cc2c6927298206dc6739b12b06db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181441 Malicious code in baso81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6b7651f46986b656741d0f4804751981aebbd24718f11d523b1de51b03eb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c04a9237f85fe2bf4a8b6fcb2ff46969bc4f164bf850137ffe3324ced69f4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039ef11a13efbc33e5f5fb9dc1f9ca288598ead02e26ee795bdc28d6c7e5e5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf59e5b808b0358ac24f3b067217b9d9c11b610639413d35049141b0ee976e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4b0a1b5b7fd0152f065d078d7a699cad4e858c8dcfaba5bb42eda600fe4e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181326 Malicious code in @akunsansan0/pucuk12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b214b0cc1b7c6e26dd715953103a2c0c0bbe764a343f4e86757ea2b04b8bd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

CVE-2025-64429

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

Malicious code in teate-thy-sonic-gevu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5076b1af51ccebab37e48079a0c9f5792fa376f2280e1bfae79230213ec0fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faig-avuffigufufuib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8a2543f29554b78a355635e5c5547cca999a761334d74645c197142acb8504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ecanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e705d0c35fddbf20fce2c45145783729ec7dbd9fc4a3735abe9c6c0195fde97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faig-afiguib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd680063d0c7f7f63a30a69c1d6c84dc172987696c8ca808ec1fe434cec9f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papmoa-yamog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bcbe053d646f65d0f665426468b4bf5d9b056ee23975b1783a07e04715b325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...