EUVD-2025-114193

Malicious code in electron-fornax-testcafe-centauri npm...

EUVD-2025-122189

Malicious code in scripts-got-electron-quark npm...

EUVD-2025-114189

Malicious code in electron-init-vulcan-wolf npm...

Malicious code in carpo-ignite-electron-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b7c30af3b3626ed4d0c18eee5818fbc188b087d67563e7607290b27fe3b630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114197

Malicious code in electron-eslint-aether-style-loader npm...

EUVD-2025-113052

Malicious code in grunt-electron-pulsar-kinetic npm...

EUVD-2025-113543

Malicious code in forever-init-hermes-electron npm...

EUVD-2025-120476

Malicious code in wezen-electron-scripts-blaze npm...

EUVD-2025-114390

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...

Malicious code in electron-semantic-ui-local-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8ae4d278c10bbf43bd015302566ba9e83c2ad8462dec439b9985e4afdb95ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-electron-request-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e539cb02c91ae228f455572ac5991dd7b11d2b868b70f0070586ea8fd26a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-forever-cypress-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bec960c5d2c7b30446df4bb08b2972ef4d36ff312d03c3c4bce4b033e08d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113339

Malicious code in gacrux-nightmare-electron-builder-warp npm...

Malicious code in apollo-command-prompts-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aee3af8c6dc412fc7b594fac4ce1ea971aa6e50ba29153cb14e20aa1e6b645f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-style-loader-transport-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8207d9edb05f31592dc56be9b98d0e2ac56c7bb7c766278adf76b39dcd12b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114738

Malicious code in cygnus-jupiter-markdown-pdf-electron-builder npm...

EUVD-2025-115544

Malicious code in ceres-electron-builder-nuxtjs-acamar npm...

MAL-2025-140380 Malicious code in capella-buffer-cypress-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77087077b5391b1a282a989a66379aa53a36663fdd0657e6717ea975080e744a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140368 Malicious code in canopus-phoebe-electron-builder-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36eeabd19bdeac8a1ef874d116c625c345e5f293b115ed04241d7f4b9e3d9df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147488 Malicious code in rollup-atlas-electron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2af1ee5d3e4992b88a68bb2875b0a18c7257ad9df640d557993353350d1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...