MAL-2025-181780 Malicious code in avangi-oliuka-tamoaiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673878ced58cbe79afa9f467bc2ae315afe8e918f0f64ce23d34b5a2daf6e5c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181860 Malicious code in avangs-olium-niluva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea15ad30452b9fa1f4f63a757019ccb7231e5a9801a6e1755e98d57e34fded3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183082 Malicious code in item-at-labiomizazkapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e70ed568ab1e8723700eac0bfd1a6505da65ee9e529cf05aec7657f1bc1ca28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182224 Malicious code in gociy-ung-ugafugaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62473ede2648e101769af597a926d6011b6ff2cd084dbc71aed769fc34ef80f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184634 Malicious code in odasv-knu-bonijavufcacvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228de940dc4064ee4dcdea3ed4d3aeace7e3d6fe1ef1553c7fc440c465e7bbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184458 Malicious code in modiov-kiufni-ufavcseqinsdxaodataycptaban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06819724c0243b90bbfdb0bab7c496fc9c8ef41602d9dc043b801825ddb25baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182121 Malicious code in gocay-uga-viguvuiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b7be3e3de6e17c48a9f4dd7b3c302d4f6c55a5f46f39fc5ee0c60605ae70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183993 Malicious code in mitok-doni-olodagiviis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98502d6eb9efcd4f0faac599115a5a6ce0e0a21bac4ec6be56703473737808d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184645 Malicious code in odasv-knu-bonijv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf651f3ca48a308725d0de23311ba42fec864bb2addf6b43a0a197873590ec49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184142 Malicious code in mlokok-lofki-afuhianagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fffc18e7ec6285bb29c7408ed2134204af966c9df1782498a82c4bb1e113b838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181871 Malicious code in avangs-olium-nolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180168e59d0ed38e42c9c18b878dec2a13d32d1455d4561fd54415ed23317b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183478 Malicious code in lobac-ubg-afe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8fee0f43cb1470f3bd1210d847a9bffef9ed3fac3691ed77d4a0e5160e544ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183837 Malicious code in masolv-ilo-cvaginauovhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da1050da4d6710ba552e19f802311f63f2c70ecf0a1cc0d99896408c468af01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184840 Malicious code in poliaoz-alai-ava0buku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d1ee1e4fcfb6d861a6ee2420abc019a04b93c35f17a482c32baf5c18e011a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182875 Malicious code in itale-adci-ggryuyegfjbsgbajtrnnsuegytefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d05b0d3bc15faeade43519536762bc3294515da5fbb200063f09464c3974e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184924 Malicious code in sonic-kaos-fagiugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae51ff9080cc118ca57c131d010a8bc1048c8982b44c527176f07ded5d1bc56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184280 Malicious code in modiov-kian-avcafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f1813dfaef074afd8d6d83647caec8d62681b7019a1964aa56dc59a5e7c8bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183619 Malicious code in lomi-ifush-ugofalifufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86167b4c74de89854397ebea7ca70b7abf2e44ef1e4e59ff6cbfb7555b6f2b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182630 Malicious code in imugiay-ajvog-dnieamfnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a5cff2cc643271285e1ebc42752532779a4aada9c298a37e521549b10996e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PYSEC-2025-112

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...