MAL-2025-181311 Malicious code in @akunsansan0/karedok4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e23ce70b7437fa33c358f910e68b86287edc4efa8dd764cd0f1b0d84c28c036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181569 Malicious code in tea_gunt99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b81db11f1bd88d9e39837c890e06e842a6ab3787cffee97034cf09d6f97789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5e93d29eddc21366fdb7fb7190c4cd298a49c63146554ea1aab064ee4b1fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181511 Malicious code in kopi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075bc07912c66f901e5bb925929fab970bcd021edb8a7922894da2fad8587ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181485 Malicious code in cewe30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b369b4b9f7c7abc31be7f052c223858f2718a7f915f9cff526a96a0d5bb41451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181230 Malicious code in @akunsansan0/biru42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01b2f8d6dc042cfcb01fc2b7797a0856b63a0384b61919884e5d5377e6b8d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

Malicious code in analuba-inu-nil013ka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a853788132db13aa08a1e318b105379acda2720bc07a22f298857a6b0c98d58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-impun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b09c183a7a0528c129a568c484cc76b7fc54f13ae1b5307fa263530cda674f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ceski (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2daee4b101887856c5b8228cea3d99cd8d71cc360b184cdce43a9c7ea4ed0c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ucuwaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e22526584efeb8a7cbf9ea2c1978ceb89a493f9ea66fcbaa0d254302fcea71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kajeca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19d47526009f3950c095b68a03ba964ca0ba0a7c371b645bb7404fb785ccc0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kiglan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2027a21006bbc4035a6557eb9aefd00c1fa0a965a9cca325e067cf69c366d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-tulbif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fc5c26b390ecf8dc6535e35e758a0c31f74416c50262fa9778e66bf99b11f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc096aedd33233cbdf45b73e1e66dee6490138a0a732c24aac16515a99ec1dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fa9009f25f89b81762dece513d407caf214769b911774ed81b8653a809c397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0pai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dcfb7daee6012f6d1031b0ce2d41968b3771879c79be52cf548cd3796838c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zucso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b705e0b588a9a40dfdc67ba120807be6418948dfa465554e5eff0dccdf2a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180639 Malicious code in teate-thy-sonic-lepeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20082f10f6c35c2708b3f4a5a17777da0ab038431132dd434caa633b6c9beda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...