VYPR
← All malware advisories

npm · Malicious package advisory

Malware

vite-dynamic-chunks

MAL-2025-191600

Malicious code in vite-dynamic-chunks (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (6babb911a34c3564bc3482994130fa36a5b088b1132550960a97582c74ed11f8)
The package vite-dynamic-chunks was found to contain malicious code.

Compromised versions (2)

  • 2.0.6
  • 2.0.7

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.