MAL-2026-13274 Malicious code in devplatform-vite-plugin-preserve-css-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0781a29416d218a9767f37894e3ad9a851110f50693a4bcb1ab6bd168e1f6feb On require of the package, index.js loads loader.js which selects a platform-specific endpoint, downloads a native binary over HTTPS from...

Malicious code in devplatform-vite-plugin-preserve-css-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0781a29416d218a9767f37894e3ad9a851110f50693a4bcb1ab6bd168e1f6feb On require of the package, index.js loads loader.js which selects a platform-specific endpoint, downloads a native binary over HTTPS from...

Malicious code in @ornikar/typed-css-modules-loader (npm)

npm/@ornikar/typed-css-modules-loader is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...

Malicious Package

Overview devplatform-vite-plugin-preserve-css-modules is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

esm.sh code injection vulnerability

esm.sh is a content delivery network of esm.sh open source. A code injection vulnerability exists in versions prior to esm.sh 136, which stems from a template literal injection vulnerability in the CSS to JavaScript module functionality that could lead to a cross-site scripting attack or remote...

vite-plugin-vue-css-modules (3.1.4) potentially affected by CVE-2023-45133 via @babel/traverse (8.0.0-alpha.2)

@babel/traverse NPM version 8.0.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on @babel/traverse and may be impacted: - vite-plugin-vue-css-modules 3.1.4 Source cves: CVE-2023-45133 Source advisory: GHSA-67HX-6X53-JW92...

vite-plugin-vue-css-modules (3.1.4) potentially affected by CVE-2023-45133 via @babel/traverse (8.0.0-alpha.2)

@babel/traverse NPM version 8.0.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on @babel/traverse and may be impacted: - vite-plugin-vue-css-modules 3.1.4 Source cves: CVE-2023-45133 Source advisory: OSV:GHSA-67HX-6X53-JW92...

vite-plugin-vue-css-modules (3.1.4) potentially affected by CVE-2023-45133 via @babel/traverse (8.0.0-alpha.2)

@babel/traverse NPM version 8.0.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on @babel/traverse and may be impacted: - vite-plugin-vue-css-modules 3.1.4 Source cves: CVE-2023-45133 Source advisory: MEND:CVE-2023-45133...

Google Chrome buffer error vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability previously existed in Google Chrome version 116.0.5845.110, which stemmed from an out-of-bounds read issue in CSS modules...