EUVD-2025-116061

Malicious code in blitz-cross-env-ini-electron-builder npm...

EUVD-2025-113842

Malicious code in europa-fusion-cross-env-electron-builder npm...

EUVD-2025-114205

Malicious code in electron-builder-hydra-mensa-stream npm...

MAL-2025-141897 Malicious code in electron-builder-async-titan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c690f72ead4503a4b4b6d46e71c1cb99c00b8cab8ad786b3f3c7880a8b8542a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114204

Malicious code in electron-builder-jupiter-markdown-schema npm...

Malicious code in regulus-electron-builder-toml-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb363ff17fae4c8c782d0db9a96bc1aa2a403f59fa362575ea111d739766e891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112533

Malicious code in indus-vuepress-gravity-electron-builder npm...

Malicious code in karma-electron-builder-blitz-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7509e20ca26b7c59996183c03c0c1f8e94eccd887ac91a3b488ba5d569464f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121620

Malicious code in stop-thuban-fetch-electron-builder npm...

EUVD-2025-111115

Malicious code in mira-altair-markdownlint-electron-builder npm...

Malicious code in indus-vuepress-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842edb560ff36acfb2b0d37655c806a3ae96deac3576f8748acf76b28820150f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141900 Malicious code in electron-builder-dactyl-duplex-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83d8f4360296ef119b2c24d37c9dcc2f776e60772206aa423b96d8654dd84b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113416

Malicious code in framework-wolf-yaml-electron-builder npm...

Malicious code in scorpius-umbra-electron-builder-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862a2349ffda24c475fb6b50662ed3b2a243d7c9031ce530c284e46c5f71a68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123335

Malicious code in procyon-electron-builder-reveal-md-changelog npm...

EUVD-2025-120414

Malicious code in winston-nodemon-electron-builder-rest npm...

EUVD-2025-113737

Malicious code in express-electron-builder-eslint-plugin-firebase npm...

MAL-2025-141775 Malicious code in dotenv-safe-rocket-yildun-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab681a6c2a430ed29dad736b499a541d332284c90b454364ac5649861285a1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...