
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
electron-windows-msix
Advanced tools
Electron-Windows-MSIX is a module that lets you create an MSIX installer from a packaged Electron App.
npm install electron-windows-msix
PACKAGING OPTIONS
appDir - The folder containing the packaged Electron App
appManifest - The AppManifest.xml containing necessary declarations to build the MSIX
manifestVariables - Optional manifest variables to generate a manifest if manifest file is not provided
packageAssets - Required assets declared in AppManifest.xml. E.g. icons and tile images
outputDir - The output directory for the finished MSIX package.
packageName - Optional name for the finished MSIX package. If not provided a name will be derived from AppManifest.xml.
windowsKitVersion - Optional version of the WindowsKit to use. If WindowsKitPath is provide then it will trump this. If neither WindowsKitVersion nor
WindowsKitPath is provided then the Windows Kit path will be derived from the S Version specified in AppManifest.xml.
windowsKitPath - An optional full path to the WindowsKit. This path will trump both WindowsKitVersion and AppxManifest.
createPri - Indicates whether to create Pri resource files. It is enabled by default.
cert - An optional path to the certificate. If not provided then the MSIX will not be signed. Beware that the Publisher of the cert
must match the AppxManifest Publisher.
cert_pass - Optionally the password for the cert.
signParams - Optionally an explicit set parameter for the SignTool. If present it will supersede the cert an cert_pass parameter.
sign - Optional parameter that indicates whether the MSIX should be signed. True by default.
logLevel - Optional log level. By default the module will be silent. The 'warn' level will give heads up on irregularities.
The 'debug' level will give extensive output to identify problems with the module.
MANIFEST GENERATION VARIABLES
packageIdentity - The identity of the MSIX package.
publisher - The publisher of the MSIX package. This will also be used to create a dev certificate if one is
publisherDisplayName - The display name of the publisher of the MSIX package.
packageVersion - The version of the MSIX package. Semantic version can be used. However, pre-release version will be converted to valid Windows versions .
packageDisplayName - The display name of the MSIX package. This will be used to set the DisplayName attribute in the AppxManifest.xml.
packageDescription - The description of the MSIX package. This will be used to set the Description attribute in the AppxManifest.xml.
packageBackgroundColor - The background color of the MSIX package. This will be used to set the BackgroundColor attribute in the VisualElements element in theAppxManifest.xml.
appExecutable - The executable of the MSIX package. This will be used to set the Executable attribute in the AppxManifest.xml.
appDisplayName - The name of the MSIX package. This will be used to set the DisplayName attribute in the VisualElements element in the AppxManifest.xml.
targetArch - The target architecture of the MSIX package. This will be used to set the ProcessorArchitecture attribute in the AppxManifest.xml. 'x64' |'arm64' | 'x86' | 'arm' | '*';
packageMinOSVersion - The minimum OS version the MSIX package requires. This will be used to set the MinVersion attribute in the TargetDeviceFamily element in theAppxManifest.xml.
packageMaxOSVersionTested - The maximum OS version the MSIX package has been tested on. This will be used to set the MaxVersionTested attribute in the TargetDeviceFamily element in the AppxManifest.xml.
import { packageMSIX } from "electron-windows-msix";
await packageMSIX({
appDir: 'C:\\temp\\myapp',
outputDir: 'C:\\temp\\out',
manifestVariables: {
publisher: 'CN=Dev Publisher',
packageIdentity: 'com.example.app',
packageVersion: '1.42.0.0',
appExecutable: 'hellomsix.exe',
targetArch: 'x64',
},
});
import { packageMSIX } from "electron-windows-msix";
await packageMSIX({
appDir: 'C:\\temp\\myapp',
appManifest: 'C:\\temp\\AppxManifest.xml',
packageAssets: 'C:\\temp\\assets',
outputDir: 'C:\\temp\\out',
cert: 'C:\\temp\\app_cert.pfx',
cert_pass: 'hellomsix',
});
import { packageMSIX } from "electron-windows-msix";
await packageMSIX({
appDir: 'C:\\temp\\myapp',
packageAssets: 'C:\\temp\\assets',
outputDir: 'C:\\temp\\out',
manifestVariables: {
appDisplayName: 'Hello MSIX',
publisher: 'CN=Dev Publisher',
publisherDisplayName: 'Dev Publisher',
packageDisplayName: 'Hello MSIX',
packageDescription: 'Just a test app',
packageBackgroundColor: '#000000',
packageIdentity: 'com.example.app',
packageVersion: '1.42.0.0',
appExecutable: 'hellomsix.exe',
targetArch: 'x64',
packageMinOSVersion: '10.0.19041.0',
packageMaxOSVersionTested: '10.0.19041.0',
},
windowsKitPath: 'C:\\Program Files (x86)\\Windows Kits\\10\\bin\\19041\\x64',
createPri: true,
cert: 'C:\\temp\\app_cert.pfx',
cert_pass: 'hellomsix',
packageName: 'MyApp.msix',
logLevel: 'warn',
sign: true
});
import { packageMSIX } from "electron-windows-msix";
await packageMSIX({
appDir: 'C:\\temp\\myapp',
appManifest: 'C:\\temp\\AppxManifest.xml',
packageAssets: 'C:\\temp\\assets',
outputDir: 'C:\\temp\\out',
windowsKitPath: 'C:\\Program Files (x86)\\Windows Kits\\10\\bin\\10.0.17763.0\\x64',
createPri: true,
cert: 'C:\\temp\\app_cert.pfx',
cert_pass: 'hellomsix',
packageName: 'MyApp.msix',
logLevel: 'warn',
sign: true
});
FAQs
MSIX packager for Electron Apps
The npm package electron-windows-msix receives a total of 1,439 weekly downloads. As such, electron-windows-msix popularity was classified as popular.
We found that electron-windows-msix demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.