EUVD-2025-32989

Malicious code in vite-plugin-opticompress npm...

Malicious code in vite-plugin-opticompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2944281b796b865693c16f2bb84aa5a7e7060d92c19fe89079b20f7f4c63ba70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48017 Malicious code in vite-plugin-opticompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2944281b796b865693c16f2bb84aa5a7e7060d92c19fe89079b20f7f4c63ba70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-chunk-chop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0a281ba5e607e5e0a1ec33d95c6f94c54c8b9e04bb37df988126453585d7a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview vite-plugin-chunk-chop is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2025-47933 Malicious code in vite-plugin-chunk-chop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0a281ba5e607e5e0a1ec33d95c6f94c54c8b9e04bb37df988126453585d7a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-32005

Malicious code in bioql PyPI...

EUVD-2025-29441

Malicious code in bioql PyPI...

Malicious code in vite-plugin-parse-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0c3c9412f03ac4be0712f183133c219efac17d93edf28bf821d9dae53b7856e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview vite-plugin-parse-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47870 Malicious code in vite-plugin-parse-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0c3c9412f03ac4be0712f183133c219efac17d93edf28bf821d9dae53b7856e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-chunk (npm)

The package vite-plugin-chunk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e870026da8fa5893d57ae270527d5bb4d1eb31ee085d5a9f9e14c96c504a2fc7 Any computer that has this package installed or running should be considered fully...

MAL-2025-47837 Malicious code in vite-plugin-chunk (npm)

The package vite-plugin-chunk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e870026da8fa5893d57ae270527d5bb4d1eb31ee085d5a9f9e14c96c504a2fc7 Any computer that has this package installed or running should be considered fully...

Malicious Package

Overview vite-plugin-optichunk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in vite-plugin-optichunk (npm)

The package vite-plugin-optichunk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6397b10743e7db5e33165e9561210449ade8c6671259d396b92d6c5bc9becb49 Any computer that has this package installed or running should be considered fully...

MAL-2025-47570 Malicious code in vite-plugin-optichunk (npm)

The package vite-plugin-optichunk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6397b10743e7db5e33165e9561210449ade8c6671259d396b92d6c5bc9becb49 Any computer that has this package installed or running should be considered fully...

Malicious code in vite-plugin-parse-json (npm)

The package vite-plugin-parse-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4013d2b27a0c8568a2b51161431838d7877caf18d55e179597d06e162989b484 Any computer that has this package installed or running should be considered full...

MAL-2025-47514 Malicious code in vite-plugin-parse-json (npm)

The package vite-plugin-parse-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4013d2b27a0c8568a2b51161431838d7877caf18d55e179597d06e162989b484 Any computer that has this package installed or running should be considered full...

Malicious Package

Overview vite-plugin-parse-json is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CVE-2025-59427

The Cloudflare Vite plugin enables a full-featured integration between Vite and the Workers runtime. When utilising the Cloudflare Vite plugin in its default configuration, all files are exposed by the local dev server, including files in the root directory that contain secret information such as...