@vite-tab/tabui
Native-ESM powered web dev build tool
This report shows the evidence for @vite-tab/tabui@7.15.16. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiDirect source inspection confirms an automatically executed, obfuscated dynamic-code loader in the public CLI entrypoint. Although it is not install-time, its concealed execution path is concrete malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
User or tool invokes the package's `vite` bin.
Impact
Arbitrary attacker-controlled behavior can run with the invoking user's Node permissions.
Mechanism
Obfuscated constructor-based dynamic payload execution.
Attack narrative
The package replaces the expected CLI-only behavior with a hidden payload appended after the normal Vite bootstrap. On every `vite` invocation, that code reconstructs `constructor`, dynamically creates functions from encoded strings, and invokes the final hidden function. This is deliberate opaque execution in a developer tool entrypoint and is not explained by the package's stated build-tool purpose.
AI rationale
Direct source inspection confirms an automatically executed, obfuscated dynamic-code loader in the public CLI entrypoint. Although it is not install-time, its concealed execution path is concrete malicious behavior.
Evidence
bin/vite.jspackage.json
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- `bin/vite.js` appends a 7.5KB obfuscated payload after the normal CLI.
- The appended code decodes `constructor`, builds a function from hidden strings, and invokes it during module evaluation.
- The payload aliases `require`, `module`, `__dirname`, and `__filename` onto globals before executing.
- The `vite` bin is exposed by `package.json`, so any `vite` CLI invocation triggers the hidden payload.
Evidence against
- `package.json` has no `preinstall`, `install`, or `postinstall` hook.
- The visible prefix of `bin/vite.js` is a normal Vite CLI bootstrap.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsObfuscatedUrlStrings
Source & flagged code
10 flagged · loading sourcedist/node/chunks/dep-Cy9twKMn.jsView file
17import { StringDecoder } from 'node:string_decoder';
L18: import { exec, execSync } from 'node:child_process';
L19: import { createServer as createServer$3, STATUS_CODES, get as get$2 } from 'node:http';
L20: import { createServer as createServer$2, get as get$1 } from 'node:https';
...
L30: import { createHash as createHash$2 } from 'node:crypto';
L31: import { promises } from 'node:dns';
L32: import require$$3$1 from 'crypto';
...
L52: const __filename = __cjs_fileURLToPath(import.meta.url);
L53: const __dirname = __cjs_dirname(__filename);
L54: const require = __cjs_createRequire(import.meta.url);
...
L93: let argv = process.argv || [],
L94: env$1 = process.env;
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/node/chunks/dep-Cy9twKMn.jsView on unpkg · L1717import { StringDecoder } from 'node:string_decoder';
L18: import { exec, execSync } from 'node:child_process';
L19: import { createServer as createServer$3, STATUS_CODES, get as get$2 } from 'node:http';
L20: import { createServer as createServer$2, get as get$1 } from 'node:https';
...
L30: import { createHash as createHash$2 } from 'node:crypto';
L31: import { promises } from 'node:dns';
L32: import require$$3$1 from 'crypto';
...
L52: const __filename = __cjs_fileURLToPath(import.meta.url);
L53: const __dirname = __cjs_dirname(__filename);
L54: const require = __cjs_createRequire(import.meta.url);
...
L93: let argv = process.argv || [],
L94: env$1 = process.env;
Critical
Remote Asset Decode Execute
Findings
3 Critical5 High4 Medium7 Low
CriticalCredential Exfiltrationdist/node/chunks/dep-Cy9twKMn.js
CriticalRemote Asset Decode Executedist/node/chunks/dep-Cy9twKMn.js
CriticalTrigger Reachable Dangerous Capabilitydist/node/chunks/dep-Cy9twKMn.js
HighChild Processdist/node/chunks/dep-Cy9twKMn.js
HighShelldist/node/chunks/dep-Cy9twKMn.js
HighEvaldist/node/chunks/dep-Cy9twKMn.js
HighObfuscated Payload Loaderbin/vite.js
HighKnown Malware Source Fingerprint Signaturedist/node/chunks/dep-Cy9twKMn.js
MediumDynamic Requiredist/node/runtime.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @vite-tab/tabui@7.15.16.
The versions list below shows the verdict for each recorded version.
- Avoid installing @vite-tab/tabui@7.15.16. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.