Malicious code in @uw010010/vite-tree (npm)

Source: amazon-inspector 280687ad50e03b43bf7f26df6afb1a8fb794eb486c126b2368f37c6b76625318 The package @uw010010/vite-tree impersonates the upstream vite package: its package.json verbatim copies vite's author 'Evan You', description 'Native-ESM powered web dev build tool', bin name 'vite',...

Malicious code in @vitets/vite-ts (npm)

Source: amazon-inspector 8fe093d0d0fa83ab20aa57e9d9c8500e03a25ead578ff351fdc3609118cf5ecf Package is published as @vitets/vite-ts and copies the legitimate Vite project's author Evan You, README, homepage vitejs.dev, and repository github.com/vitejs/vite to impersonate the real vite / @vitejs/...

Malicious code in @vite-mcp/vite-type (npm)

Source: amazon-inspector 9828d7f04091054759c65d427b8f9d7b2853a8a062f9ca261a37e0a0bbc231d0 Package @vite-mcp/[email protected] impersonates the legitimate vite package: package.json declares name '@vite-mcp/vite-type', author 'Evan You', repository 'github.com/vitejs/vite', and a bin entry 'vite' →...

Malicious code in @vite-pro/vite-ui (npm)

Source: amazon-inspector 9aaf307faea8efb93af6f3c8ee4811304a7d9afa25f1c9525aed108efea439e7 Package @vite-pro/vite-ui impersonates the official vite package: package.json declares author Evan You, points repository at github.com/vitejs/vite, sets homepage to vitejs.dev, ships the upstream Vite...