registry / Remote code execution / @vite-js/vui
@vite-js/vui
Native-ESM powered web dev build tool
This report shows the evidence for @vite-js/vui@7.14.16, the only known version.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiDirect source inspection confirms a concealed payload appended to the public CLI entrypoint and executed on every CLI invocation. The absence of an install hook does not mitigate this concrete runtime execution chain.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
User or tool executes the installed `vite` bin.
Impact
Arbitrary concealed code executes in the invoking user's Node environment.
Mechanism
Obfuscated decoded-payload execution in the CLI entrypoint.
Attack narrative
`package.json` maps the `vite` command to `bin/vite.js`. After the normal Vite launcher, that file appends opaque string-shuffling and decoding logic, constructs a concealed payload, and immediately invokes it. This is unrelated to normal CLI operation, concealed rather than bundled application logic, and creates arbitrary code-execution capability whenever the command runs.
AI rationale
Direct source inspection confirms a concealed payload appended to the public CLI entrypoint and executed on every CLI invocation. The absence of an install hook does not mitigate this concrete runtime execution chain.
Evidence
package.jsonbin/vite.js
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- `bin/vite.js` appends an obfuscated IIFE after the legitimate CLI.
- The appended code decodes concealed strings and invokes the decoded payload via `hTf(3504)`.
- The payload runs whenever the declared `vite` bin is executed.
- `package.json` exposes `bin/vite.js` as the `vite` command.
- Only `prepublishOnly` exists; the payload is runtime-triggered, not an install hook.
Evidence against
- No preinstall, install, or postinstall lifecycle hook.
- No plaintext external endpoint is visible in the inspected payload.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsObfuscatedUrlStrings
Source & flagged code
14 flagged · loading sourcedist/node/chunks/dep-Cy9twKMn.jsView file
17import { StringDecoder } from 'node:string_decoder';
L18: import { exec, execSync } from 'node:child_process';
L19: import { createServer as createServer$3, STATUS_CODES, get as get$2 } from 'node:http';
L20: import { createServer as createServer$2, get as get$1 } from 'node:https';
...
L30: import { createHash as createHash$2 } from 'node:crypto';
L31: import { promises } from 'node:dns';
L32: import require$$3$1 from 'crypto';
...
L52: const __filename = __cjs_fileURLToPath(import.meta.url);
L53: const __dirname = __cjs_dirname(__filename);
L54: const require = __cjs_createRequire(import.meta.url);
...
L93: let argv = process.argv || [],
L94: env$1 = process.env;
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/node/chunks/dep-Cy9twKMn.jsView on unpkg · L1717import { StringDecoder } from 'node:string_decoder';
L18: import { exec, execSync } from 'node:child_process';
L19: import { createServer as createServer$3, STATUS_CODES, get as get$2 } from 'node:http';
L20: import { createServer as createServer$2, get as get$1 } from 'node:https';
...
L30: import { createHash as createHash$2 } from 'node:crypto';
L31: import { promises } from 'node:dns';
L32: import require$$3$1 from 'crypto';
...
L52: const __filename = __cjs_fileURLToPath(import.meta.url);
L53: const __dirname = __cjs_dirname(__filename);
L54: const require = __cjs_createRequire(import.meta.url);
...
L93: let argv = process.argv || [],
L94: env$1 = process.env;
Critical
Remote Asset Decode Execute
Findings
3 Critical9 High4 Medium7 Low
CriticalCredential Exfiltrationdist/node/chunks/dep-Cy9twKMn.js
CriticalRemote Asset Decode Executedist/node/chunks/dep-Cy9twKMn.js
CriticalTrigger Reachable Dangerous Capabilitydist/node/chunks/dep-Cy9twKMn.js
HighChild Processdist/node/chunks/dep-Cy9twKMn.js
HighShelldist/node/chunks/dep-Cy9twKMn.js
HighEvaldist/node/chunks/dep-Cy9twKMn.js
HighObfuscated Payload Loaderbin/vite.js
HighKnown Malware Source Similaritydist/node/chunks/dep-Cy9twKMn.js
HighKnown Malware Source Similaritydist/node-cjs/publicUtils.cjs
HighKnown Malware Source Similaritydist/node/chunks/dep-BkYu-SNl.js
High
Affected versions and remediation
This report applies to @vite-js/vui@7.14.16.
The versions list below shows the verdict for each recorded version.
- Avoid installing @vite-js/vui@7.14.16. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.