Malicious code in @vite-tab/tab (npm)

Source: amazon-inspector 95af865d1cf7d45f2b4c2a73eebcfcd1a1a6aba9a36f33bf8256ef4d7235903c @vite-tab/tab republishes Vite's codebase under a different name while impersonating the upstream project: package.json declares bin: vite: 'bin/vite.js' hijacking the vite command on $PATH, author: 'Evan...