EUVD-2025-112497

Malicious code in init-carpo-kastra-auth0 npm...

EUVD-2025-122495

Malicious code in reveal-md-yildun-auth0-cz-conventional-changelog npm...

EUVD-2025-122726

Malicious code in relay-auth0-taurus-async npm...

EUVD-2025-120187

Malicious code in xo-auth0-sedna-node-sass npm...

EUVD-2025-116362

Malicious code in auth0-carpo-npm-castor npm...

Malicious code in auth0-forever-postgres-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b82056a31b43b01d8c289b59dd98b00ce4269e59a1eb05e83db7933f8f3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124374

Malicious code in node-sass-magellan-mongodb-auth0 npm...

EUVD-2025-116353

Malicious code in auth0-jsonp-promise-buffer npm...

EUVD-2025-124740

Malicious code in morgan-init-auth0-rollup npm...

EUVD-2025-114088

Malicious code in enceladus-auth0-leda-sadr npm...

Malicious code in corvus-ophiuchus-kastra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1167ba24be7b9251d59e542b0593599d3d543aacc86c2bd0a6b7643b4babbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123438

Malicious code in prettier-plugin-markdown-hydra-sass-loader-auth0 npm...

EUVD-2025-124858

Malicious code in miranda-sync-despina-auth0 npm...

MAL-2025-142467 Malicious code in figures-fusion-nextjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1463c83e9442351390e432473567d37b69c6d7f58d11c80760ebca55e7323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116351

Malicious code in auth0-markdown-pdf-jovian-cluster npm...

EUVD-2025-112171

Malicious code in jovian-auth0-apex-element-ui npm...

MAL-2025-139741 Malicious code in auth0-chariklo-rimraf-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be16292185703b19d81d57d39d2566605a656affe85387e75dfe92b2e94e7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143174 Malicious code in halley-xenon-redis-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a82fb14fc14d212a9598dafb9eea71406a66225bce74082297225fcbb50c261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-bellatrix-flare-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e8fb78cbfe2b9703119843bcf9dc9fed3a416b3af62cc1f848ee7ed6c007a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...