MAL-2025-66078 Malicious code in wati-oblok98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1647129b692b27532344374d2e20ca70140972cf0d9ae9bbfbfa65065fc3236e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62815 Malicious code in erwin-miebogor91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d1215f5d591076ec8590b52f74ead15197c151b84b31a9e9ebb732cfb2b24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62820 Malicious code in erwin-oblok47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5f1975235b05640523b90ad2bb71a0baf2a2d43e2ad3818a92e809c33d32cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65933 Malicious code in vicarious_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc58656eb420b4ddac85702b3e96eedc840ad6a8dc493eb7d0c1305bc5612531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61850 Malicious code in alright_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a533f6ab8732110c033c51f457353575fdddb74fbd4addc395f9796fcfc97c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64922 Malicious code in putri-miebogor68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7a37b961fcb4ec9fa97c2ea2fea874a1caaaed16b15f5bfe522ac558007942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sate76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c542be8e006d940b7e70099aa1b03888ec33438fda2830128e02440a7b500e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

QLCoder: A Query Synthesizer for Static Analysis of Security Vulnerabilities

Static analysis tools provide a powerful means to detect security vulnerabilities by specifying queries that encode vulnerable code patterns. However, writing such queries is challenging and requires diverse expertise in security and program analysis. To address this challenge, we present QLCoder...

Malicious code in sweet_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ed41228783a23d56e2930449d7b9faed916ddf07fff884d5561712f229cc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in early_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ef1247e85bfb5d6959dbb47ca23dab18d40f093b4b23b134b33f4a8dcdc740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a873382b5da6586c12db4a58dc66b41591845b4a6253a04681ce5a7c174e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970043b79695cbf846ecf478459a43563574549828fb11ea2b1b85579f1a6c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84d9a42f7010d031f3f39dc64eedc85ab887704f3a9450a2427e43d98e22b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61126 Malicious code in quiet_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07ca0036159ed1b57cf9b2ae541871a6203f5863d791946857bc905383afcce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61495 Malicious code in tragic_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430ac5d17840d1ff0409476f297e3ce286b0582a8dfb28ef23141abe09f6a90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60818 Malicious code in marked_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5db9f4038d8e1c1ee3dc162d4dfa9c98b88b1e394e2033099f59bfdec5f52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61255 Malicious code in senior_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585e5694df0a58faaf075e723b6867010c57150e92a0916670d12c0a03f8b96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61244 Malicious code in secret_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f18f612712e65a2aa5a754b477adcd186446ad885833b94ad94571dab5b848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60723 Malicious code in judicial_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59de572052ea413f2de1ea45bf4a408658cdb7259af509df046105e96bad3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61302 Malicious code in smart_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020791797274c140ea28f2ea15f282d56c325be2493d461efa5daeba16066819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...