EUVD-2025-132083

Malicious code in teate-thy-sonic-vite npm...

MAL-2025-181051 Malicious code in teate-thy-sonic-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9bd7535c1fedd0789cba27a3937d313903eb6644b0b352a673574ab3183a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vite-plugin-postcss-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4552bafe10098b91c4ce3128c885efb1c472d7f7c18b7bca5d2b174ed097e396 The package vite-plugin-postcss-tools was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-50835

Malicious code in vite-plugin-postcss-tools npm...

Malicious code in vite-smart-chunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c305ef00e7f688f3c3a3f647f19aa629de8f81c0f2d9a2d96ac673edfca0f1 The package vite-smart-chunk was found to contain malicious code. Source: ghsa-malware 87ee583206ce0948a7c052ee600515c370f53dffe893e50730ff8ad8f353e2...

Malicious Package

Overview vite-smart-chunk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-37951

Malicious code in vite-smart-chunk npm...

MAL-2025-49372 Malicious code in vite-smart-chunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c305ef00e7f688f3c3a3f647f19aa629de8f81c0f2d9a2d96ac673edfca0f1 The package vite-smart-chunk was found to contain malicious code. Source: ghsa-malware 87ee583206ce0948a7c052ee600515c370f53dffe893e50730ff8ad8f353e2...

ExploitReport

The Exploit Report — Portfolio React A single-page React si...

Malicious code in vite-manual-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview vite-manual-chunker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-36420

Malicious code in vite-manual-chunker npm...

MAL-2025-48914 Malicious code in vite-manual-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36421

Malicious code in vite-plugin-es6-compat npm...

Malicious code in vite-plugin-es6-compat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3963df81ab545839d03c3c54ab9ee88549e38a44b32fe6ad05002d554da780b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48915 Malicious code in vite-plugin-es6-compat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3963df81ab545839d03c3c54ab9ee88549e38a44b32fe6ad05002d554da780b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-parsify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 031b7573beae98422d50771f010df5ea83910b304700e644b2e5b8cb6111aa59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36118

Malicious code in vite-plugin-parsify npm...

Malicious Package

Overview vite-plugin-parsify is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48784 Malicious code in vite-plugin-parsify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 031b7573beae98422d50771f010df5ea83910b304700e644b2e5b8cb6111aa59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...