EUVD-2025-115962

Malicious code in browserify-spectron-webdriver-electron-builder-delphinus npm...

EUVD-2025-121834

Malicious code in solis-ultra-electron-builder-toml npm...

Malicious code in electron-builder-hydra-mensa-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733f1c84e1e35649320ac770b0244b8355e49429b646695a80cfddf7197fa907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116061

Malicious code in blitz-cross-env-ini-electron-builder npm...

EUVD-2025-114184

Malicious code in electron-phoebe-electron-builder-slides npm...

EUVD-2025-114198

Malicious code in electron-builder-spica-halley-winston npm...

EUVD-2025-112533

Malicious code in indus-vuepress-gravity-electron-builder npm...

EUVD-2025-113416

Malicious code in framework-wolf-yaml-electron-builder npm...

Malicious code in carpo-bunyan-server-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6973f52a63181e3e68ed68ba75c24c59287e638797dd3fe7f6afe8254cc2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122755

Malicious code in rehype-dotenv-safe-electron-builder-zenobia npm...

EUVD-2025-121168

Malicious code in transform-cz-conventional-changelog-electron-builder-tethys npm...

EUVD-2025-122203

Malicious code in scorpius-umbra-electron-builder-elektra npm...

MAL-2025-140041 Malicious code in blitz-cross-env-ini-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6aac823acd3e3c267be48e988aa756d7993859affa2c0bcf864a109ee1f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141897 Malicious code in electron-builder-async-titan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c690f72ead4503a4b4b6d46e71c1cb99c00b8cab8ad786b3f3c7880a8b8542a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141900 Malicious code in electron-builder-dactyl-duplex-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83d8f4360296ef119b2c24d37c9dcc2f776e60772206aa423b96d8654dd84b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-electron-builder-electron-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89451cce2a5eb649d2d41e81bac9973e221fc357c00c5c02407d9fc9dbb119ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141775 Malicious code in dotenv-safe-rocket-yildun-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab681a6c2a430ed29dad736b499a541d332284c90b454364ac5649861285a1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141908 Malicious code in electron-builder-mensa-capella-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c324de26b9b9044a959f6ee90bfbb74d52d4f086add21d9857bac277be23aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-umbra-electron-builder-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862a2349ffda24c475fb6b50662ed3b2a243d7c9031ce530c284e46c5f71a68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-style-loader-transport-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8207d9edb05f31592dc56be9b98d0e2ac56c7bb7c766278adf76b39dcd12b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...