EUVD-2025-120723

Malicious code in vuetify-delphinus-rigel-helmet npm...

EUVD-2025-114591

Malicious code in delphinus-gridsome-async-miranda npm...

EUVD-2025-113496

Malicious code in fornax-dotenv-safe-delphinus-kronos npm...

Malicious code in farout-delphinus-wasat-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d8eb4fd157d99907ee9c9382a68a664a9abec27f6b53a1e2a784d51166e7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121282

Malicious code in thuban-delphinus-rollup-plugin-graphql npm...

EUVD-2025-112527

Malicious code in ini-delphinus-fetch-sync npm...

Malicious code in delphinus-elara-arcturus-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e31c55e192550433235a3c031a4cda8b30ee9f66224b49942a341e0b5a126d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112358

Malicious code in izar-delphinus-ursa-hermes npm...

MAL-2025-145905 Malicious code in orbit-delphinus-convict-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8c21db0ca3c2e3cdca7740c7b7694a527a0fa3c519ff73b575f380f1740876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141516 Malicious code in delphinus-elektra-google-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a9f3c56f15f2dad442fa22d3bd3b846b22b3c8c6cb79ee4de7f413a622ddc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145946 Malicious code in parcel-algol-websockets-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57bfb271ed0be2a37c4903201cee169c43cb8a36467c7594c743bb1addd9942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122279

Malicious code in sails-delphinus-build-react-bootstrap npm...

MAL-2025-141526 Malicious code in delphinus-non-blocking-mysql-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1d58c5a5d0d5e690108078ebedab4b4ccd7530c04b5a21e5335aaa9bcbc593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145310 Malicious code in nconf-deimos-postcss-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865cce33f39643e61e6f6e8ef24989339dfae8ee7032912dd33dfc700f985496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141512 Malicious code in delphinus-auriga-helios-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bce6aef65b047690f12ec284b604cd35af45717c4af859051fd00bb4939858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139449 Malicious code in antares-xanadu-delphinus-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74bc9a61c43f8b3b4c87c88e18264683cf969e9cf7073998f6774e77b9a36b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122013

Malicious code in shelljs-chai-remark-delphinus npm...

MAL-2025-44143 Malicious code in epimetheus-registry-delphinus-aldebaran (npm)

The package epimetheus-registry-delphinus-aldebaran was found to contain malicious code...

Malicious code in umbra-jest-acamar-delphinus (npm)

The package umbra-jest-acamar-delphinus was found to contain malicious code...