Malicious code in auth0-forever-postgres-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b82056a31b43b01d8c289b59dd98b00ce4269e59a1eb05e83db7933f8f3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116354

Malicious code in auth0-gacrux-gatsby-metalsmith npm...

EUVD-2025-114088

Malicious code in enceladus-auth0-leda-sadr npm...

EUVD-2025-116365

Malicious code in auth0-bellatrix-flare-webdriver-manager npm...

EUVD-2025-116362

Malicious code in auth0-carpo-npm-castor npm...

MAL-2025-145547 Malicious code in node-sass-magellan-mongodb-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219e3fb0d56abde1dc3b799139abbef4f1eb1b65d940883d6bf200f233d4364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140156 Malicious code in buffer-cypress-auth0-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0c18409218143999f63d9b4bb00c9a7582921a01c8ab912420d733ad20687d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145060 Malicious code in miranda-sync-despina-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddac1488fe65453e57b62caf85d562e3e2b5eda8fc296fa78fca7fd5046bbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143174 Malicious code in halley-xenon-redis-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a82fb14fc14d212a9598dafb9eea71406a66225bce74082297225fcbb50c261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139743 Malicious code in auth0-cygnus-farout-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f358ba8f4b4d9e99efca5ba9615c7aca5971cc9cc415499a66f3b5529194551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142467 Malicious code in figures-fusion-nextjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1463c83e9442351390e432473567d37b69c6d7f58d11c80760ebca55e7323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139741 Malicious code in auth0-chariklo-rimraf-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be16292185703b19d81d57d39d2566605a656affe85387e75dfe92b2e94e7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111492

Malicious code in magellan-auth0-markdownlint-puppeteer npm...

EUVD-2025-122759

Malicious code in rehype-auth0-superagent-semantic-release npm...

EUVD-2025-113271

Malicious code in gatsby-enif-auth0-proxima npm...

EUVD-2025-122558

Malicious code in rest-rimraf-auth0-comet npm...

EUVD-2025-120344

Malicious code in xanadu-auth0-xo-kinetic npm...

EUVD-2025-123696

Malicious code in pino-middleware-zephyr-auth0 npm...

Malicious code in relay-auth0-taurus-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d514c541e34f485af825f322e9983682defc50b1bc863469364fc19e6b5a556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...