MAL-2025-181323 Malicious code in @akunsansan0/kopi8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df09c5bcf7eece7b9b2e3dcabfb5cc51bca8556d0474858d0802360f3136fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64429

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

Malicious code in teate-thy-sonic-piwkez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e89fc7603b1f28058b7854045baba46b407f243f7520ed671dc5c1aa2677df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ebimoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98c5f37e425baba7bb130d780129e46791517b3aa986d1d820c1c860d778c63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-roci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812871633648c28932315ef90c7c3be69cd1926a3e552af45f7645cec8512466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180642 Malicious code in teate-thy-sonic-libusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a76f7df0d1c98738fd501770e767b7d9ae6f8f1bc904469e2f0242590cc5b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180577 Malicious code in teate-thy-sonic-jukdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4165050475f4be3a3e99345ef135bb3ad5ea4567868490d2b5d68cdbc998826a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-133852

Malicious code in lookingan-nanakila79 npm...

Malicious code in kisut-faig-avuffigufufuib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8a2543f29554b78a355635e5c5547cca999a761334d74645c197142acb8504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-oltup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3c7482e4023975f6f13867c3900198418dfb9b8c2c288f5afc52bc6eed4d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-jetla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa93f428d0da3db91d89247849da683a0188eef1378e8e82a12176ed55728a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-seop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb16c29bb1b05a0eec43bcf7bb150e88e68b9d8441fc5fb2d0f75dd900b9740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-afnig-akifub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ccfce4d9f99bc852ea70c52234124c028dd54e16bece5d26ae481617c0646e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-nezmuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99e5b01c8f93607f328d9d667abd7d3cee803f4de37bba34222033b41ed65ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-muvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3aa495fd8791c8f9bfc30cdb9972eb3da71111202ff5d864b1096e7f24a9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-oloku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0809e18be8022a2ac9299b1f41ee29cc3ffd45c0d5846aa9c0e6830ab0991fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-gojig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cfaaa4a5c2058237e55ad67da76cf9a59ca2b44e1bafae8925c2f658e1bacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180572 Malicious code in teate-thy-sonic-jonsut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e753c6f0862b9c29636588b5d4a91c1025c172f02dd36f971f181ed1c74ee41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180346 Malicious code in teate-thy-sonic-eteke (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cad61a993b3d918c598f1b2fd0d07a60475472e02bb9aabafc911a40260f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...