Malicious code in jaja-kripik95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61451354f22e4b50c487438315366b35fdcbd5783cd05611db74aa4552bfcd3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62820 Malicious code in erwin-oblok47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5f1975235b05640523b90ad2bb71a0baf2a2d43e2ad3818a92e809c33d32cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65487 Malicious code in surya-rawon66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ddba8b2653b34e8c809a9130cbf6c240a0f3f2bdd82effbb5147a9ec597cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64966 Malicious code in qori-klentik57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f669ad8b2e3660feefca9566d837c3a5a6e3f39656bbb68d5d77af173aeb9b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62393 Malicious code in consistent_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce4cc1b0e278ee5159bf71950a86c9d2eee81478aad1e88bf229d0840f543f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61850 Malicious code in alright_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a533f6ab8732110c033c51f457353575fdddb74fbd4addc395f9796fcfc97c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62815 Malicious code in erwin-miebogor91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d1215f5d591076ec8590b52f74ead15197c151b84b31a9e9ebb732cfb2b24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-nasipecel58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f69fdae4486f721b21992aa799fd6bb29faf074899d37e91a669d22984669e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63948 Malicious code in labour_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d863e3c4340fff43ae60a273097ae16e4c0d431eb90d0568a40f0670d4bf5f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63461 Malicious code in indah-bakwan78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980ed7a3e3d3bc511d12f5d510ce546960beea150879f6e3be3f7d6e41684df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-peyek99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12472fd2b496786d03687661ed8286232501bc75374fd436b24f83759f528bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-mendut50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c569ce7161e20f321ac90edf110eaaffea23233b7347f56f6df2fd3668e015a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

QLCoder: A Query Synthesizer for Static Analysis of Security Vulnerabilities

Static analysis tools provide a powerful means to detect security vulnerabilities by specifying queries that encode vulnerable code patterns. However, writing such queries is challenging and requires diverse expertise in security and program analysis. To address this challenge, we present QLCoder...

Malicious code in eligible_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7de7e6803c9a36421f4b56c5feba32759b2966b87011cb0ab3ede2fe636795d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f437e30f1f08087894f7082391714892ccdde70d32d1e39e66fc53cefe3380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60818 Malicious code in marked_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5db9f4038d8e1c1ee3dc162d4dfa9c98b88b1e394e2033099f59bfdec5f52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59925 Malicious code in additional_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2c48be6fe89592048070c54254c406088d741a38f2ee02d1dbfff3fe842943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc39c720a975336ba66cc8b205b28d8a51ac5bac146944d36b1c05bae73d198d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970043b79695cbf846ecf478459a43563574549828fb11ea2b1b85579f1a6c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in early_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ef1247e85bfb5d6959dbb47ca23dab18d40f093b4b23b134b33f4a8dcdc740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...