npm scope
@vite-tab
LPM Firewall blocks 2 packages in the @vite-tab npm scope. 1 has LPM's own review and is listed first.
Jul 14, 2026
@vite-tab/tabui@7.15.16
MalwareDirect source inspection confirms an automatically executed, obfuscated dynamic-code loader in the public CLI entrypoint. Although it is not install-time, its concealed execution path is...
Jul 8, 2026
@vite-tab/tab@5.7.0
MalwareOpenSSF Malicious Packages via OSV confirms @vite-tab/tab@5.7.0 as malicious (MAL-2026-6988): Malicious code in @vite-tab/tab (npm)
Each card opens the package page with its evidence and every recorded version.