EUVD-2025-113223

Malicious code in geckodriver-xenon-nova-auth0 npm...

MAL-2025-142467 Malicious code in figures-fusion-nextjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1463c83e9442351390e432473567d37b69c6d7f58d11c80760ebca55e7323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120344

Malicious code in xanadu-auth0-xo-kinetic npm...

MAL-2025-144136 Malicious code in kaus-auth0-dione-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8daa66d3ad3bc016afc3ec7e198370914aeb3104fbc6b0d6d953e52ed5be7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122362

Malicious code in sadr-envconfig-auth0-webpack npm...

EUVD-2025-112778

Malicious code in hermes-xml-auth0-sirius npm...

EUVD-2025-122269

Malicious code in sails-neptune-scripts-auth0 npm...

EUVD-2025-111492

Malicious code in magellan-auth0-markdownlint-puppeteer npm...

EUVD-2025-111668

Malicious code in lint-staged-auth0-blitz-cors npm...

EUVD-2025-112497

Malicious code in init-carpo-kastra-auth0 npm...

EUVD-2025-112171

Malicious code in jovian-auth0-apex-element-ui npm...

EUVD-2025-111977

Malicious code in kaus-auth0-dione-redis npm...

Malicious code in auth0-bellatrix-flare-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e8fb78cbfe2b9703119843bcf9dc9fed3a416b3af62cc1f848ee7ed6c007a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-cygnus-farout-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f358ba8f4b4d9e99efca5ba9615c7aca5971cc9cc415499a66f3b5529194551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-forever-postgres-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b82056a31b43b01d8c289b59dd98b00ce4269e59a1eb05e83db7933f8f3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-mutation-websockets-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a95486272da0dcb64f02df91085552ced1adeb9b08f616af39826bb91826831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-cypress-auth0-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0c18409218143999f63d9b4bb00c9a7582921a01c8ab912420d733ad20687d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-webdriver-mocha-titan-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb9f36e47eee948dd38ebe0cf6ae2a2da5e5920cf63ac7a40deb44853bfc698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-ophiuchus-kastra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1167ba24be7b9251d59e542b0593599d3d543aacc86c2bd0a6b7643b4babbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-google-auth0-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15389f5580c9c15a58a0408109441fdba6487427ec7c99e16aa04252529901d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...