MAL-2025-62820 Malicious code in erwin-oblok47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5f1975235b05640523b90ad2bb71a0baf2a2d43e2ad3818a92e809c33d32cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gulai58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba502d07cf93c79c77672af2d13bbde725d607473ac5ca79a9faef670723f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-klipo17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d04bf0775ea3893409e597aad6285ad8c7efee6506952bfb42b54d8dae5b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66078 Malicious code in wati-oblok98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1647129b692b27532344374d2e20ca70140972cf0d9ae9bbfbfa65065fc3236e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

QLCoder: A Query Synthesizer for Static Analysis of Security Vulnerabilities

Static analysis tools provide a powerful means to detect security vulnerabilities by specifying queries that encode vulnerable code patterns. However, writing such queries is challenging and requires diverse expertise in security and program analysis. To address this challenge, we present QLCoder...

Malicious code in sweet_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ed41228783a23d56e2930449d7b9faed916ddf07fff884d5561712f229cc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970043b79695cbf846ecf478459a43563574549828fb11ea2b1b85579f1a6c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84d9a42f7010d031f3f39dc64eedc85ab887704f3a9450a2427e43d98e22b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a873382b5da6586c12db4a58dc66b41591845b4a6253a04681ce5a7c174e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in early_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ef1247e85bfb5d6959dbb47ca23dab18d40f093b4b23b134b33f4a8dcdc740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60818 Malicious code in marked_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5db9f4038d8e1c1ee3dc162d4dfa9c98b88b1e394e2033099f59bfdec5f52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60723 Malicious code in judicial_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59de572052ea413f2de1ea45bf4a408658cdb7259af509df046105e96bad3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61244 Malicious code in secret_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f18f612712e65a2aa5a754b477adcd186446ad885833b94ad94571dab5b848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61495 Malicious code in tragic_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430ac5d17840d1ff0409476f297e3ce286b0582a8dfb28ef23141abe09f6a90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61126 Malicious code in quiet_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07ca0036159ed1b57cf9b2ae541871a6203f5863d791946857bc905383afcce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61302 Malicious code in smart_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020791797274c140ea28f2ea15f282d56c325be2493d461efa5daeba16066819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61255 Malicious code in senior_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585e5694df0a58faaf075e723b6867010c57150e92a0916670d12c0a03f8b96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7de7e6803c9a36421f4b56c5feba32759b2966b87011cb0ab3ede2fe636795d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f437e30f1f08087894f7082391714892ccdde70d32d1e39e66fc53cefe3380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jarwohokyah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d8b8dee3e7e097af3a07443b5dea99ca72f19f6236bc8e4db0f6737baaf7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...