The constructor of com.sqlmagic.tinysql.tinySQLPreparedStatement expects a string with a question mark in it. If there is no question mark, Vector "substitute" is not initialized, resulting in a NullPointerException (see attachment for a small test)>
Forgot to mention: This bug was under Mac 10.9, Java 6 or 7, against the latest release (2.26).