Malicious code in @vite-js/vui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89dd59b0cc2b2931e47b1822fa705eba41767d28ae89bce2e277254377dd9a0a Package publishes under @vite-js/vui while impersonating the official vite package: package.json sets author "Evan You", description "Native-ESM...

MAL-2025-48683 Malicious code in frontend-vite (npm)

The package frontend-vite was found to contain malicious code...

Malicious code in template-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06fbee942dbb167dc44c38bf807a7092a1ee1f59c1852062bb2ba0e3a22bc64e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-859W-5945-R5V3 vulnerabilities

Vulnerabilities for packages: vite, vitess...

CVE-2025-46565 vulnerabilities

Vulnerabilities for packages: vite, langfuse, vitess, langfuse-fips...

CVE-2024-47068 vulnerabilities

Vulnerabilities for packages: vite, vitess...

CVE-2024-47068 vulnerabilities

Vulnerabilities for packages: vite...

CVE-2024-45812 vulnerabilities

Vulnerabilities for packages: vite...

CVE-2024-45812 vulnerabilities

Vulnerabilities for packages: vite...

CVE-2024-45811 vulnerabilities

Vulnerabilities for packages: vite...

CVE-2024-45811 vulnerabilities

Vulnerabilities for packages: vite...

GHSA-64VR-G452-QVP3 vulnerabilities

Vulnerabilities for packages: vite...

GHSA-9CWX-2883-4WFX vulnerabilities

Vulnerabilities for packages: vite...

CVE-2024-31207

A flaw was found in the Node.js Vite package. When configuring the "server.fs.deny" server option to deny requests that include a pattern with directories such as /foo//, the requests were still being allowed. This can potentially expose files or directories containing sensitive information. Only...