0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
vite-ts-vite-ui
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting vite-ts-vite-ui, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-10527 | Unknown | Malicious code in @vite-ts/vite-ui (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c6076869d73ce328ffd736c9df9d269cd99e505ffc3bfceae5d3f5a633a8c420) Package @vite-ts/vite-ui@6.44.1 impersonates the legitimate vite package: it clones vite's README, declares author 'Evan You', homepage https://vitejs.dev, repository vitejs/vite, and a bin entry mapping `vite` to bin/vite.js. The shipped bin/vite.js contains an obfuscated IIFE that reconstructs a string table from a shuffled blob using the integer seed 4606094 to hide the strings 'https', 'child_process', 'eval', 'POST', '2.0', and the des |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c6076869d73ce328ffd736c9df9d269cd99e505ffc3bfceae5d3f5a633a8c420) Package @vite-ts/vite-ui@6.44.1 impersonates the legitimate vite package: it clones vite's README, declares author 'Evan You', homepage https://vitejs.dev, repository vitejs/vite, and a bin entry mapping `vite` to bin/vite.js. The shipped bin/vite.js contains an obfuscated IIFE that reconstructs a string table from a shuffled blob using the integer seed 4606094 to hide the strings 'https', 'child_process', 'eval', 'POST', '2.0', and the des