EUVD-2025-111115

Malicious code in mira-altair-markdownlint-electron-builder npm...

Malicious code in scorpius-umbra-electron-builder-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862a2349ffda24c475fb6b50662ed3b2a243d7c9031ce530c284e46c5f71a68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113737

Malicious code in express-electron-builder-eslint-plugin-firebase npm...

EUVD-2025-114201

Malicious code in electron-builder-nconf-warp-fetch npm...

EUVD-2025-115673

Malicious code in carpo-bunyan-server-electron-builder npm...

Malicious code in electron-builder-aldebaran-betelgeuse-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549f931c6a986c413378aa543184df78de854ec169ccb0a68ffb6399b50edb49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-electron-builder-toml-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb363ff17fae4c8c782d0db9a96bc1aa2a403f59fa362575ea111d739766e891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111162

Malicious code in middleware-electron-builder-arcturus-lint npm...

EUVD-2025-120456

Malicious code in wezen-webdriverio-rate-limiter-electron-builder npm...

EUVD-2025-114212

Malicious code in electron-builder-cassini-mutation-postcss-loader npm...

EUVD-2025-114439

Malicious code in docusaurus-lyra-ganymede-electron-builder npm...

Malicious code in xenos-style-loader-transport-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8207d9edb05f31592dc56be9b98d0e2ac56c7bb7c766278adf76b39dcd12b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115544

Malicious code in ceres-electron-builder-nuxtjs-acamar npm...

EUVD-2025-114390

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...

EUVD-2025-115563

Malicious code in centaurus-eslint-plugin-hapi-electron-builder npm...

EUVD-2025-113842

Malicious code in europa-fusion-cross-env-electron-builder npm...

EUVD-2025-122611

Malicious code in request-sails-equinox-electron-builder npm...

Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148380 Malicious code in superagent-deneb-mui-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e52b99c6fcff081e31ec483416e07155aa049b9fecb93cb71ba0b66e3642d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...