registry / Remote code execution / vite-config-svg

vite-config-svg

A lightweight React utility for fetching, validating, and managing SVG icons from CDN sources.

This report shows the evidence for vite-config-svg@1.1.7, the only known version.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The concealed runtime install and execution are unrelated to SVG validation and constitute a concrete malicious execution chain. Lack of an npm lifecycle hook limits activation to explicit API use but does not remove the risk.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

Caller invokes getPlugin() or setPlugin() on a directory containing an SVG, or a non-directory path.

Impact

Unconsented installation and execution of remote package code in the consumer environment.

Mechanism

obfuscated npm install followed by dynamic require and invocation

Attack narrative

A caller using the documented SVG scan APIs reaches validateSvgContent. Its Base64 command installs rollup-plugin-polyfill-helper with silent flags and no manifest entry. On completion, the package dynamically requires that dependency and calls getPlugin or setPlugin. Thus ordinary local SVG scanning silently pulls and executes registry-controlled code in the consumer project.

AI rationale

Evidence

package.jsonindex.jsREADME.mdindex.d.ts<caller-supplied dirPath>/**/*.svgnode_modules/rollup-plugin-polyfill-helper

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js decodes and silently spawns `npm install rollup-plugin-polyfill-helper`.
getPlugin/setPlugin trigger that install for each discovered SVG.
The installed package is dynamically required and its methods invoked.
package.json has no lifecycle hook; the behavior is hidden behind exported APIs.

Evidence against

No install-time execution is declared in package.json.
No direct credential harvesting or exfiltration is present in package source.

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemNetwork

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 10.4 KB of source

Source & flagged code

3 flagged

index.jsView file

•matchType = normalized_sha256 matchedPackage = react-hot-svg@1.1.4 matchedPath = index.js matchedIdentity = npm:cmVhY3QtaG90LXN2Zw:1.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 289d11d48b3841df signatureType = suspicious_hashes sourceLabel = OpenSSF malicious-packages matchedPackage = react-icons-svgo@1.5.4 matchedPath = index.js matchedIdentity = npm:cmVhY3QtaWNvbnMtc3Znbw:1.5.4 similarity = 1.000 shingleOverlap = 1 summary = Malicious code in react-icons-svgo (npm)

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

17// Node built-ins for filesystem access and path manipulation. L18: const fs = require('fs'); L19: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L17

Source & flagged code

3 flagged · loading source

index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

17// Node built-ins for filesystem access and path manipulation. L18: const fs = require('fs'); L19: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L17

Findings

2 High2 Medium3 Low

HighKnown Malware Source Similarityindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumDynamic Requireindex.js

MediumNetwork

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to vite-config-svg@1.1.7.

The versions list below shows the verdict for each recorded version.

Avoid installing vite-config-svg@1.1.7. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-04 23:05:42.536Z (UTC).

Source advisory published: 2026-07-31 11:08:11.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

1.1.7latestshownMaliciousRemote Code ExecutionBlockPublishedJul 22, 2026, 6:26 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Related packages

Other remote code execution packages

Source & flagged code