MAL-2025-183799 Malicious code in masolv-avilo-civbusasoufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd1ee749f4c8ed7d4d32e4766d4130209d8114a3fa45d5554922d80372ce581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfehxafeabf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f3563778737a5af8555bc41353f17bca309b26890b5f687e37c6e5e57d1367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-hajisubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f6fd6fc4eb302d7e529b07110d6c04e214214ad257841475d6173bd7d9dfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182047 Malicious code in flights-lutuiog-aloina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5e6182848eac541f35b5b51fb86c941b024428aba1ca8006590f0f06c6670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-afayorganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d28c3468d07e9cabf90c5c3b7dc2f30f41f4f0ad1311c0e4fbea4698dec1181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarage-olios-noilag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0e03258cc3ff220b58f7f9ed8db43fbacbf403979fa6cde1e1138d50ffcb63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaesddeadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f61781864bd2a012c3cf87943a9336e43e6bf1be3bc0902296573a9499a4571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokok-lki-haj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64c8edae9fff6c36a5caf69be345d34558a27deb515f4f1e97f87f058534465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182289 Malicious code in imalok-ofe-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e3d7f3037441530ff54d40eaf0e010501458dff8b615f758e9aef8a72b6d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danugamicfoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233457f82c9d479ed4fc900a3acc9f618a5712b2be5486251f1285edde7760bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadojaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0352f621d3af13b88b0127eeff1aa5ab72c74691ef61cc12a25c8992b1b2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxaoycurptvmauban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0bbea6fd0b9be4bf48e1bf246b31c52985cab4a61f680774a9ea40b4f6f639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PYSEC-2025-112

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

Malicious code in bako5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db611ff84f632a4a2d30cc1976e1463496b9237d7dff4443ee163460ce881c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39996ab245b744a18cc86ef786e37d389e5830144e272e9af07c90f6871a0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7e1a0ab7db9f9c6a4425933b1af70de64fb636d3d39e1670afec0379bea73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181259 Malicious code in @akunsansan0/jorelat11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d45438deaf189f973e8f7c291ef5d3c87b8d22537bdad1658159ea1a914f24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c04a9237f85fe2bf4a8b6fcb2ff46969bc4f164bf850137ffe3324ced69f4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaguntur99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fc097a34987ba2d92daddc67d1026757bea8d1028dbf629d10cd127588b43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee85808e8eb865fcefcf83491e1350b67b3aaceca3e162c16242b5da0d85efc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...