Malicious code in electron-builder-gridsome-callback-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d649fb3727c16290ecd60b5cbbaca8040d62a9ceac4ce113ad39d98f13ab77b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114209

Malicious code in electron-builder-galaxy-xo-pavo npm...

EUVD-2025-114477

Malicious code in development-server-electron-builder-hermes npm...

EUVD-2025-114202

Malicious code in electron-builder-mensa-capella-fork npm...

EUVD-2025-114190

Malicious code in electron-hugo-link-config npm...

EUVD-2025-114898

Malicious code in cosmos-nightmare-xenon-electron-builder npm...

Malicious code in nebula-electron-relay-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5fe572a26cb12ea989b18242cbfc51386be972e2424a2d2223b5bbd8d58ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122777

Malicious code in regulus-electron-builder-toml-convict npm...

EUVD-2025-123065

Malicious code in puppeteer-pino-electron-builder-development npm...

EUVD-2025-114186

Malicious code in electron-orbit-eris-sagitta npm...

EUVD-2025-113646

Malicious code in figures-duplex-husky-electron npm...

MAL-2025-147719 Malicious code in scorpius-umbra-electron-builder-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862a2349ffda24c475fb6b50662ed3b2a243d7c9031ce530c284e46c5f71a68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141925 Malicious code in electron-pegasus-perseus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671af7da2ae010d3996821b6cebc6aeeebef5043d6a5c62b3fe0d51ba287aa07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144466 Malicious code in lint-staged-start-electron-builder-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e73ecafc9499e1568b2977d0dd9f18f353acbc15330cf67c197d36a5ffec75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140129 Malicious code in browserify-antd-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b73d5108ceb7964a0b3a0e61afd7965a64b68bf06041bb1b24837b5be84fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141913 Malicious code in electron-eslint-aether-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1f7548f783c12e5c8d0c42b73eac3624796ce6e399f4eba565d01f3f352840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141932 Malicious code in electron-semantic-ui-local-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8ae4d278c10bbf43bd015302566ba9e83c2ad8462dec439b9985e4afdb95ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139446 Malicious code in antares-vega-electron-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040d240576965aed13ed11371c55ee7e2365e2d115a89b45043d3337d7d15156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111912

Malicious code in koa-postgres-blaze-electron npm...

Malicious code in yildun-config-electron-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3075d940b4cb7305a807b21108734d5b68f8e26426628454d4345e25a3851c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...