vite-plugin-compress-plus

MAL-2026-2913

Malicious code in vite-plugin-compress-plus (npm)

Details

vite-plugin-compress-plus is a malicious npm package that when imported downloads and executes a C2 dropper from https://www.jsonkeeper[.]com/b/OTOAQ.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (65e37bfe23d9bb451691cffd0333e0900835c8982785dde1908973adf2beaa7a)
The package vite-plugin-compress-plus was found to contain malicious code.