MAL-2025-181560 Malicious code in roti50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed2a1f9ba89157dc64bc71ad7062eaa94ef9abcf555c71a2a27832cb8de2506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181576 Malicious code in teh_manis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3c5241b89463681edc8f15ceda83f09b2b352326ba37d5a6ea1bf48dba7256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181301 Malicious code in @akunsansan0/karedok30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1414cb1117f85870f3139cf78ae79a2e663dad3903b5200ede9f51c21246aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05424ec1bfcc8371e06aeb3f04dc8ef69d7190a0341de389f28243d16463a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ccd8e21e64f04ef0fb7a4cb56757c60065fc6b20f77e1df834184b08ab4c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181328 Malicious code in @akunsansan0/pucuk5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07f7cb1ed18490f212973177629bc15e76b5e9ae9e213e090ad85294a497209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181300 Malicious code in @akunsansan0/karedok3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40db40457836bcbf74fbc6267fa21f0747031b2a5ef36ffa8104f92e66b160bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181448 Malicious code in baso88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0aa786369123d5c8bd731e352eddd9c300d89ee93c3bf56e5d8a09b5d0c7430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc92e86f8dd7930ae960a69013506257a6bd3072b232759020780e19cdc2e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179ae4571ce61c5e1999e5ab0e2e272516affe550b49f290f6322205bccc9503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5e93d29eddc21366fdb7fb7190c4cd298a49c63146554ea1aab064ee4b1fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5a7cb3ff5d6fc75f10de7ce0602e4c8caac234555e644707c6c3872186b8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181485 Malicious code in cewe30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b369b4b9f7c7abc31be7f052c223858f2718a7f915f9cff526a96a0d5bb41451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181569 Malicious code in tea_gunt99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b81db11f1bd88d9e39837c890e06e842a6ab3787cffee97034cf09d6f97789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181511 Malicious code in kopi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075bc07912c66f901e5bb925929fab970bcd021edb8a7922894da2fad8587ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181311 Malicious code in @akunsansan0/karedok4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e23ce70b7437fa33c358f910e68b86287edc4efa8dd764cd0f1b0d84c28c036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181230 Malicious code in @akunsansan0/biru42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01b2f8d6dc042cfcb01fc2b7797a0856b63a0384b61919884e5d5377e6b8d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

Malicious code in teate-thy-sonic-zevur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1c9ad8079bfa69b4d6866fb76b12663acf9bd2bd9a6086e6a9374fe8428afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...