EUVD-2025-121620

Malicious code in stop-thuban-fetch-electron-builder npm...

EUVD-2025-113495

Malicious code in fornax-electron-builder-electron-sass-loader npm...

Malicious code in electron-phoebe-electron-builder-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80972fc2e361fb8c4448eaa72d3719327b32fd4539f424c63b7b1874f596fcc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114184

Malicious code in electron-phoebe-electron-builder-slides npm...

Malicious code in electron-builder-hydra-mensa-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733f1c84e1e35649320ac770b0244b8355e49429b646695a80cfddf7197fa907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114205

Malicious code in electron-builder-hydra-mensa-stream npm...

MAL-2025-141897 Malicious code in electron-builder-async-titan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c690f72ead4503a4b4b6d46e71c1cb99c00b8cab8ad786b3f3c7880a8b8542a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116061

Malicious code in blitz-cross-env-ini-electron-builder npm...

MAL-2025-141908 Malicious code in electron-builder-mensa-capella-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c324de26b9b9044a959f6ee90bfbb74d52d4f086add21d9857bac277be23aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141775 Malicious code in dotenv-safe-rocket-yildun-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab681a6c2a430ed29dad736b499a541d332284c90b454364ac5649861285a1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141900 Malicious code in electron-builder-dactyl-duplex-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83d8f4360296ef119b2c24d37c9dcc2f776e60772206aa423b96d8654dd84b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140041 Malicious code in blitz-cross-env-ini-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6aac823acd3e3c267be48e988aa756d7993859affa2c0bcf864a109ee1f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114213

Malicious code in electron-builder-async-titan-neptune npm...

Malicious code in indus-vuepress-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842edb560ff36acfb2b0d37655c806a3ae96deac3576f8748acf76b28820150f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113350

Malicious code in gacrux-dagda-electron-builder-ultra npm...

EUVD-2025-121429

Malicious code in telesto-quito-halley-electron-builder npm...

EUVD-2025-114199

Malicious code in electron-builder-package-remark-wasat npm...

EUVD-2025-120309

Malicious code in xanthus-electron-builder-chakra-ui-lint-staged npm...

EUVD-2025-120414

Malicious code in winston-nodemon-electron-builder-rest npm...

Malicious code in electron-builder-jupiter-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6c34d8ac0eb601de5dbe1d8ffd3e9486188b296e4dabf08a27344637a8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...