Malicious code in baso38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc92e86f8dd7930ae960a69013506257a6bd3072b232759020780e19cdc2e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5a7cb3ff5d6fc75f10de7ce0602e4c8caac234555e644707c6c3872186b8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5e93d29eddc21366fdb7fb7190c4cd298a49c63146554ea1aab064ee4b1fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179ae4571ce61c5e1999e5ab0e2e272516affe550b49f290f6322205bccc9503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181485 Malicious code in cewe30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b369b4b9f7c7abc31be7f052c223858f2718a7f915f9cff526a96a0d5bb41451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181511 Malicious code in kopi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075bc07912c66f901e5bb925929fab970bcd021edb8a7922894da2fad8587ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181311 Malicious code in @akunsansan0/karedok4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e23ce70b7437fa33c358f910e68b86287edc4efa8dd764cd0f1b0d84c28c036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181230 Malicious code in @akunsansan0/biru42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01b2f8d6dc042cfcb01fc2b7797a0856b63a0384b61919884e5d5377e6b8d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181569 Malicious code in tea_gunt99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b81db11f1bd88d9e39837c890e06e842a6ab3787cffee97034cf09d6f97789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

Malicious code in teate-thy-sonic-zevur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1c9ad8079bfa69b4d6866fb76b12663acf9bd2bd9a6086e6a9374fe8428afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kiglan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2027a21006bbc4035a6557eb9aefd00c1fa0a965a9cca325e067cf69c366d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-tulbif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fc5c26b390ecf8dc6535e35e758a0c31f74416c50262fa9778e66bf99b11f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fa9009f25f89b81762dece513d407caf214769b911774ed81b8653a809c397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07368d9f98eb182f7846d4fbb3676b65c589087cd3e0499ce23afd2b48ad95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-damifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c8ea5caa91fd3051cef9eb070f67e286110c8aa88ec3f35274420857541e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ucuwaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e22526584efeb8a7cbf9ea2c1978ceb89a493f9ea66fcbaa0d254302fcea71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kajeca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19d47526009f3950c095b68a03ba964ca0ba0a7c371b645bb7404fb785ccc0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-impun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b09c183a7a0528c129a568c484cc76b7fc54f13ae1b5307fa263530cda674f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...