registry / Remote code execution / vite-svg-parse

vite-svg-parse

A lightweight React utility for fetching, validating, and managing SVG icons from CDN sources.

This report shows the evidence for vite-svg-parse@1.1.3. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Direct inspection confirms a reachable obfuscated npm-install-and-execute path in index.js. The absence of install hooks limits automatic activation but does not remove the concrete runtime RCE behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

A consumer calls getPlugin(dirPath) or setPlugin(dirPath), including on an SVG file.

Impact

Remote code execution in the consuming project's environment.

Mechanism

Obfuscated runtime dependency installation followed by dynamic module execution.

Attack narrative

The exported SVG-scanning APIs read recursive user-selected paths, then decode an npm install command for node-internal-svg-loader, spawn it silently, dynamically require that package, and invoke its plugin function. This is an undeclared, obfuscated runtime payload acquisition and execution chain unrelated to SVG validation.

AI rationale

Evidence

package.jsonindex.jsREADME.mdindex.d.tsuser-supplied dirPath/**/*.svgnode_modules/node-internal-svg-loader

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

index.js decodes and spawns `npm install node-internal-svg-loader`.
The installed module is dynamically required and its getPlugin/setPlugin method is invoked.
Both exported recursive SVG scanners trigger that chain for user-supplied paths.
Child process output is suppressed and Windows execution is hidden.

Evidence against

package.json has no preinstall/install/postinstall lifecycle hook.
No credential collection or exfiltration is present in the inspected files.

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemNetwork

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 10.3 KB of source

Source & flagged code

5 flagged

index.jsView file

17// Node built-ins for filesystem access and path manipulation. L18: const fs = require('fs'); L19: const path = require('path');

Critical

Encoded Package Runner Execution

Source decodes numeric character arrays into a child-process package-runner command and executes it.

index.jsView on unpkg · L17

•Trigger-reachable chain: manifest.main -> index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = vite-config-svg@1.1.7 matchedPath = index.js matchedIdentity = npm:dml0ZS1jb25maWctc3Zn:1.1.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 289d11d48b3841df signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = vite-config-svg@1.1.7 matchedPath = index.js matchedIdentity = npm:dml0ZS1jb25maWctc3Zn:1.1.7 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

index.jsView on unpkg

17// Node built-ins for filesystem access and path manipulation. L18: const fs = require('fs'); L19: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L17

Source & flagged code

5 flagged · loading source

index.jsView file

17// Node built-ins for filesystem access and path manipulation. L18: const fs = require('fs'); L19: const path = require('path');

Critical

Encoded Package Runner Execution

Source decodes numeric character arrays into a child-process package-runner command and executes it.

index.jsView on unpkg · L17

•Trigger-reachable chain: manifest.main -> index.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

index.jsView on unpkg

Findings

2 Critical2 High3 Medium3 Low

CriticalEncoded Package Runner Executionindex.js

CriticalTrigger Reachable Dangerous Capabilityindex.js

HighKnown Malware Source Similarityindex.js

HighKnown Malware Source Fingerprint Signatureindex.js

MediumDynamic Requireindex.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to vite-svg-parse@1.1.3.

The versions list below shows the verdict for each recorded version.

Avoid installing vite-svg-parse@1.1.3. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-12 00:30:13.062Z (UTC).

Source advisory published: 2026-08-06 19:34:20.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.0.1-securitylatestClean—AllowPublishedAug 11, 2026, 3:09 PM 1.1.3shownMaliciousRemote Code ExecutionBlockPublishedJul 31, 2026, 5:05 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Related packages

Other remote code execution packages

Source & flagged code