MAL-2025-18458 Malicious code in dione-electron-dotenv-safe-elara (npm)

The package dione-electron-dotenv-safe-elara was found to contain malicious code...

MAL-2025-19452 Malicious code in electron-native-notify (npm)

The package electron-native-notify was found to contain malicious code...

MAL-2025-29695 Malicious code in procyon-bellatrix-electron-builder-phoebe (npm)

The package procyon-bellatrix-electron-builder-phoebe was found to contain malicious code...

MAL-2025-17616 Malicious code in cosmicsilence-changelog-electron-builder-auth0 (npm)

The package cosmicsilence-changelog-electron-builder-auth0 was found to contain malicious code...

MAL-2025-27685 Malicious code in nodemon-electron-builder-babel-vega (npm)

The package nodemon-electron-builder-babel-vega was found to contain malicious code...

MAL-2025-15240 Malicious code in axios-repository-markdownlint-electron-builder (npm)

The package axios-repository-markdownlint-electron-builder was found to contain malicious code...

MAL-2025-22055 Malicious code in gulp-mocha-electron (npm)

The package gulp-mocha-electron was found to contain malicious code...

MAL-2025-21540 Malicious code in glaciology-electron-builder-docusaurus-configstore (npm)

The package glaciology-electron-builder-docusaurus-configstore was found to contain malicious code...

MAL-2025-19454 Malicious code in electron-prettier-plugin-markdown-framework-telesto (npm)

The package electron-prettier-plugin-markdown-framework-telesto was found to contain malicious code...

MAL-2025-19450 Malicious code in electron-grunt-sadr-paleomagnetism (npm)

The package electron-grunt-sadr-paleomagnetism was found to contain malicious code...

MAL-2025-19451 Malicious code in electron-kardashevscale-jovian-meteor (npm)

The package electron-kardashevscale-jovian-meteor was found to contain malicious code...

MAL-2025-19453 Malicious code in electron-osx-appearance-settings (npm)

The package electron-osx-appearance-settings was found to contain malicious code...

MAL-2025-14190 Malicious code in airbnb-fornax-draco-electron-builder (npm)

The package airbnb-fornax-draco-electron-builder was found to contain malicious code...

MAL-2025-19455 Malicious code in electron-purple-player (npm)

The package electron-purple-player was found to contain malicious code...

Malicious code in electron-test-main (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 64731d49ad099a9f118a9485fb5568a4f594576ed888e0bb96f7f278853ec158 The OpenSSF Package Analysis project identified 'electron-test-main' ...

MAL-2025-6924 Malicious code in electron-test-main (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 64731d49ad099a9f118a9485fb5568a4f594576ed888e0bb96f7f278853ec158 The OpenSSF Package Analysis project identified 'electron-test-main' ...

CVE-2025-54871

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRONRUNASNODE. This environment variable allows arbitrary Node.js code to be...

CVE-2025-51387

The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be...

CVE-2025-54871

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRONRUNASNODE. This environment variable allows arbitrary Node.js code to be...

CVE-2025-54871 Electron Capture is Vulnerable to TCC Bypass via Misconfigured Node Fuses (macOS)

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRONRUNASNODE. This environment variable allows arbitrary Node.js code to be...