Malicious Package

Overview vite-plugin-crypto is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in vite-plugin-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ee82c069dcdf259199f5844c6ff46be3020d79609ff7b7b8ebc82017c59b2c [email protected] exposes a Vite plugin factory whose body concatenates three option fields — secret, salt, and iv — into a single string and...

MAL-2026-17222 Malicious code in vite-plugin-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ee82c069dcdf259199f5844c6ff46be3020d79609ff7b7b8ebc82017c59b2c [email protected] exposes a Vite plugin factory whose body concatenates three option fields — secret, salt, and iv — into a single string and...

Malicious code in vite-plugin-images-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ac1f55db3f6447b28ded9ee9c6b792487d225e52fe5ec393f75887001a5388 This Vite plugin, advertised as an image-analysis tool, uses transformIndexHtml to inject an inline script into every built HTML page produced by the...

MAL-2026-14482 Malicious code in vite-plugin-images-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ac1f55db3f6447b28ded9ee9c6b792487d225e52fe5ec393f75887001a5388 This Vite plugin, advertised as an image-analysis tool, uses transformIndexHtml to inject an inline script into every built HTML page produced by the...

Malicious code in vite-plugin-image-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019affd7dfc88e28b20dcce52fe53661a514582fb11c51871126b967399a01d8 The package presents itself as a Vite image-tracking plugin. At build time its transformIndexHtml hook injects a script into every produced HTML page...

MAL-2026-14481 Malicious code in vite-plugin-image-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019affd7dfc88e28b20dcce52fe53661a514582fb11c51871126b967399a01d8 The package presents itself as a Vite image-tracking plugin. At build time its transformIndexHtml hook injects a script into every produced HTML page...

Malicious code in vite-plugin-bug-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127a50da55320d2b9e8e99e06d4cccf3d005cc997f3845bcae0738339cd5b882 The package presents itself as a Vite bug-tracker plugin. Its transformIndexHtml hook injects an inline script into every built HTML page produced by...

MAL-2026-14479 Malicious code in vite-plugin-bug-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127a50da55320d2b9e8e99e06d4cccf3d005cc997f3845bcae0738339cd5b882 The package presents itself as a Vite bug-tracker plugin. Its transformIndexHtml hook injects an inline script into every built HTML page produced by...

Malicious code in vite-plugin-image-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61313bbeab91eb687fc7969f9dcc1478d4b672e1f02f91e56fa886e5ea7bd04 The package presents itself as a Vite 'image analysis' plugin but contains no image-analysis code. Its transformIndexHtml hook injects an inline into...

MAL-2026-14480 Malicious code in vite-plugin-image-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61313bbeab91eb687fc7969f9dcc1478d4b672e1f02f91e56fa886e5ea7bd04 The package presents itself as a Vite 'image analysis' plugin but contains no image-analysis code. Its transformIndexHtml hook injects an inline into...

Malicious Package

Overview vite-plugin-image-tracker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview vite-plugin-images-analysis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview vite-plugin-model is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview vite-plugin-logo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview vite-plugin-image-analysis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview vite-plugin-bug-tracker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

@gluuten/gluuten-cli (0.9.5), @open-xchange/vite-plugin-i18next-gettext (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2026-55451 via gettext-converter (>=1.0.3, <=1.3.2)

gettext-converter NPM version =1.0.3, =0.0.1, =7.1.0, =4.11.2, =4.18.0 Source cves: CVE-2026-55451 Source advisory: OSV:GHSA-F4JP-RW7W-CCWG...

@gluuten/gluuten-cli (0.9.5), @open-xchange/vite-plugin-i18next-gettext (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2026-55451 via gettext-converter (>=1.0.3, <=1.3.2)

gettext-converter NPM version =1.0.3, =0.0.1, =7.1.0, =4.11.2, =4.18.0 Source cves: CVE-2026-55451 Source advisory: GHSA-F4JP-RW7W-CCWG...

MAL-2026-13465 Malicious code in vite-vue-path-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6841df6c82f556057129d7bf3f23a6cccff9da407678d980875c5529e40caa9 The package is advertised as a Vite plugin that generates a local pathInfo.json map, but its generateBundle hook appends obfuscated JavaScript to the...