malware
npm
electron-builder-13
discovered 2025-01-16electron-builder-13 is identified in the SafeDep analysis "Malicious npm Packages using Burp Collaborator for Dependency Confusion Attack". Multiple npm packages impersonating popular package names were published to the npm registry including by a Snyk researcher apparently targeting internal packages at Cursor AI.
Threat types
rat persistence dependency_confusion typosquat
Malicious versions
- 13.4.5