Encyclopedia
npm⚠ HIGHtyposquat⚠ ACTIVE THREAT

electorn

First seen: Sep 30, 2026 0 viewsMimics: electron
Share threatHN
Threat Description

A typosquat of the Electron framework (transposed 'r' and 'o'), documented by Sonatype in 2020. The package impersonated Electron to deliver an information-stealing payload that collected and exposed sensitive user information including IP address, username, and device fingerprint.

AI Hallucination Analysis
Unlikely AI Hallucination0%
Known to be hallucinated by: None - this is a real typosquat, not an AI hallucination.
Remediation Guide
  1. Remove electorn and install the legitimate electron. 2. Review what data the build environment exposed (IP, username, device fingerprint). 3. Audit for typosquatted names. 4. Pin dependencies by hash and enable npm 2FA.
View on registry
Quick Facts
Ecosystem
npm
Risk Level
HIGH
Type
typosquat
Status
ACTIVE
Legitimate Package
electron
Hallucination Confidence
0%
Check My Project
Scan for this package