registry / Staged payload carrier / vite-svg-config

vite-svg-config

A lightweight React utility for fetching, validating, and managing SVG icons from CDN sources.

This report shows the evidence for vite-svg-config@1.1.2. 2 of 2 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package has no install hook, but its normal exported runtime path silently installs and executes an unrelated external package. The obfuscation, hidden subprocess output, and dynamic second-stage execution establish malicious supply-chain behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

Consumer calls getPlugin() or setPlugin() on a file or directory containing SVG content.

Impact

Introduces and executes an unpinned external package in the consumer project, enabling arbitrary payload behavior.

Mechanism

Base64-obfuscated npm install followed by dynamic require and plugin invocation.

Attack narrative

The exported SVG scan functions read selected files and call a validator. The validator base64-decodes a command that silently installs node-config-svg-contract without recording it in package.json, then dynamically requires that package and invokes a plugin function. This conceals a remote, unpinned second-stage dependency behind an SVG-validation API and executes its code in the consumer environment.

AI rationale

Evidence

package.jsonindex.jsnode_modules/node-config-svg-contract

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

Encoded value decodes to a silent npm install of node-config-svg-contract with --no-save.
SVG validation spawns that decoded command with hidden output.
After the child exits, it dynamically requires node-config-svg-contract and invokes its getPlugin/setPlugin export.
Exported getPlugin/setPlugin recursively trigger the installer for user-selected SVG files.

Evidence against

package.json has no preinstall, install, or postinstall lifecycle hook.
No direct credential harvesting, file writes, or network endpoint is present in this package source.

Behavioral surface

Source

ChildProcessDynamicRequireFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 9.73 KB of source

Source & flagged code

5 flagged

index.jsView file

17// Node built-ins for filesystem access and path manipulation. L18: const fs = require('fs'); L19: const path = require('path');

Critical

Encoded Package Runner Execution

Source decodes numeric character arrays into a child-process package-runner command and executes it.

index.jsView on unpkg · L17

•Trigger-reachable chain: manifest.main -> index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = vite-svg-config@1.1.0 matchedPath = index.js matchedIdentity = npm:dml0ZS1zdmctY29uZmln:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 21a1c52977ea93ee signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = vite-svg-config@1.1.0 matchedPath = index.js matchedIdentity = npm:dml0ZS1zdmctY29uZmln:1.1.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

17// Node built-ins for filesystem access and path manipulation. L18: const fs = require('fs'); L19: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L17

Source & flagged code

5 flagged · loading source

index.jsView file

17// Node built-ins for filesystem access and path manipulation. L18: const fs = require('fs'); L19: const path = require('path');

Critical

Encoded Package Runner Execution

Source decodes numeric character arrays into a child-process package-runner command and executes it.

index.jsView on unpkg · L17

•Trigger-reachable chain: manifest.main -> index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

Findings

2 Critical2 High2 Medium3 Low

CriticalEncoded Package Runner Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighKnown Malware Source Similarityindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumDynamic Requireindex.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to vite-svg-config@1.1.2.

The versions list below shows the verdict for each recorded version.

Avoid installing vite-svg-config@1.1.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-11 21:10:28.444Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

1.1.2latestshownMaliciousStaged Payload CarrierBlockPublishedAug 11, 2026, 9:02 PM 1.1.0MaliciousRemote Code ExecutionBlockPublishedAug 11, 2026, 8:52 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other staged payload carrier packages

Behavioral surface

Related packages

Other staged payload carrier packages

Source & flagged code