MAL-2025-182848 Malicious code in itale-adci-ggpanekyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b0bb3e75b240082accea45fa79ee046de1da323c0c72726f296b8646669449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184934 Malicious code in sonic-kas-aagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd879d51f7729decd647411d9487605e60a885059e38ba5be96aafdb0d7fa67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181555 Malicious code in roti46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60de3543ab6a45e3fe67ed8c9379d8ba71571682ba5c122492333e510c6a2ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181512 Malicious code in kopi2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f0211d1c0171e18335597cb2db6e3620737d134d9c4588c27a77343d4f645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f7c5e1cb29b5039ad5c5c990490c3965843179eb94f762b13f27590f7e7707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

Malicious code in teate-thy-sonic-icpac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4916963c2bb0f5d906f1f1c8f824dbdceacb0246dab27a31861b6ad9931ebc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ahiezo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e765f52640da8d10a64360ae50d5e29a81efad8879d93a07537995a2edca7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179957 Malicious code in lookingan-nanakila33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadeb500d903fef7e1b17c239f28aed63b617b0cfcc9172936e4d50fe2083066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180215 Malicious code in teate-thy-sonic-bovmij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfe2f8db034fb28afe84fe6bd4b60dcc4e0744eeae444b573da32518126189f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-cujmov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1287c0bc4b37df04a2a6d1b45d45dd50d4299c70a0808420be13c4303a8b5e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-wanij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3749cd5661dd27bc7526ef83c619fb8ac136453173a195a45d1b428dc077f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-bovmij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfe2f8db034fb28afe84fe6bd4b60dcc4e0744eeae444b573da32518126189f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibola-miloipe-apamaumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f21be9b9a9533d372f0d2727078f7f26ba4224b77de562fe931e7d73a51a81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180395 Malicious code in teate-thy-sonic-fowo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d753090a8a2cbefbff9e7ff3d073bab832414e018cd9cb2eaf986dc119f9db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180965 Malicious code in teate-thy-sonic-tidti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e99a63bedddf395967d2014455b65fe7065a36027546efbd1311cf7de80e026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180985 Malicious code in teate-thy-sonic-tuju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13a455c6c33717e3379ebd5b1e032b0c3dd5c621ea400adb82b83b4467c4848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-juse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6a183c0d2745d3c08acffda8d26f0825c37e3b2794774cfdd0bbf459f1caa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0344b67cd5e13ef350edf34867e8e12064c55790d237d0cddc802749d33438f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db57a374c8ab46eb15dcc1c1a9aff916b131d4b4177785ad1c4e57fe62bb2069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...