VYPR
← All malware advisories

npm · Malicious package advisory

Malware

vite-react-setting

MAL-2025-192884

Malicious code in vite-react-setting (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (a8a246e42e62b3ccd2cac32fc43c833154af9a78ee11e47c84bad10cf7895b25)
The package vite-react-setting was found to contain malicious code.

Compromised versions (1)

  • 0.7.6

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.