The screenshot should explain everything, but just so you are aware, I already tried "NPM audit fix --force", and it does not fix the issues no matter how many times I do it. Obviously on the most recent update.
i assume this is for manually building games, and not gdevelop itself?
Basically yes. But this was recent since I was able to do so just fine a few days ago
ive never once seen the “Wacatac” trojan be detected properly, and it is nearly 100% of the time a false positive. i cannot even find any information about it on the internet about what it actually is, its just a bunch of websites saying it “exists”. This was also a problem with the games i exported with clickteam fusion. Do you think this is related to signing?
Wait, Clickteam Fusion is having similar issues? Also Not sure since I have never had this issue before until recently. Though I wonder if all the vulnerability warnings I got during the build process is related to this.
…meh. every single app has those warnings though lmao
Maybe but it’s getting bad when Windows starts auto deleting your game when you try to download. Really makes sharing games hard. Though not sure if Linux is the same way
thats exactly what it did to my clickteam games. youre right, its incredibly stupid. why does it delete by default and not quarantine? Linux doesnt even have an antivirus…or well, viruses for the most part
At any rate, I thought I share this since this is a rather big problem if game devs are unable to share games due to this nonsense.
but…why are you manually building?
Many reasons. Don’t like the build limits and I have a zero trust policy with servers handling my games.
i respect that a lot actually, most people wouldnt care. Most people (no offense) dont even know how to make games here. You actually value your games so i must assume you know what youre doing. I personally dont get why gdevelop doesnt compile the games on your computer…
Ok, decided to do an audit on the vulnerabilities. Here’s the report in detail, and no, the npm fix command does not work which is why I am having an issue
brace-expansion <=5.0.7
Severity: high
brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash - brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash · CVE-2026-14257 · GitHub Advisory Database · GitHub
fix available via npm audit fix --force
Will install electron-builder@25.1.8, which is a breaking change
node_modules/@electron/asar/node_modules/brace-expansion
node_modules/@electron/universal/node_modules/brace-expansion
node_modules/dir-compare/node_modules/brace-expansion
node_modules/filelist/node_modules/brace-expansion
node_modules/glob/node_modules/brace-expansion
minimatch 2.0.0 - 10.0.2
Depends on vulnerable versions of brace-expansion
node_modules/@electron/asar/node_modules/minimatch
node_modules/@electron/universal/node_modules/minimatch
node_modules/dir-compare/node_modules/minimatch
node_modules/filelist/node_modules/minimatch
node_modules/glob/node_modules/minimatch
@electron/asar 3.2.1 - 3.4.1
Depends on vulnerable versions of glob
Depends on vulnerable versions of minimatch
node_modules/@electron/asar
@electron/universal 1.0.1 - 3.0.3
Depends on vulnerable versions of @electron/asar
Depends on vulnerable versions of dir-compare
Depends on vulnerable versions of minimatch
node_modules/@electron/universal
app-builder-lib >=22.6.0
Depends on vulnerable versions of @electron/asar
Depends on vulnerable versions of @electron/universal
Depends on vulnerable versions of dmg-builder
Depends on vulnerable versions of ejs
Depends on vulnerable versions of electron-builder-squirrel-windows
node_modules/app-builder-lib
dmg-builder 26.0.0-alpha.0 - 27.0.0-alpha.2
Depends on vulnerable versions of app-builder-lib
node_modules/dmg-builder
electron-builder 19.25.0 || 26.0.0-alpha.0 - 27.0.0-alpha.2
Depends on vulnerable versions of app-builder-lib
Depends on vulnerable versions of dmg-builder
node_modules/electron-builder
electron-builder-squirrel-windows >=26.0.0-alpha.0
Depends on vulnerable versions of app-builder-lib
Depends on vulnerable versions of electron-winstaller
node_modules/electron-builder-squirrel-windows
electron-winstaller >=3.0.0
Depends on vulnerable versions of @electron/asar
Depends on vulnerable versions of temp
node_modules/electron-winstaller
dir-compare *
Depends on vulnerable versions of minimatch
node_modules/dir-compare
filelist 0.0.5 - 1.0.6
Depends on vulnerable versions of minimatch
node_modules/filelist
jake 10.6.1 - 10.9.4
Depends on vulnerable versions of filelist
node_modules/jake
ejs 3.1.2 - 4.0.1
Depends on vulnerable versions of jake
node_modules/ejs
glob 4.3.0 - 10.5.0
Depends on vulnerable versions of minimatch
node_modules/glob
rimraf 2.3.0 - 3.0.2 || 4.2.0 - 5.0.10
Depends on vulnerable versions of glob
node_modules/rimraf
temp >=0.8.4
Depends on vulnerable versions of rimraf
node_modules/temp