Open-source atomic malware analysis

Analyze another

vite 8.2.0

UNKNOWN
Verdict: BENIGN
SHA256: 618d8d574ecaec329f9910ffba7b16b5c6c6893462f470abddd565df763b1109
“Native-ESM powered web dev build tool”
Mal-ecule
K(Li₂)O₂(S₂Xe)H₁₀(Cm₃₀Cr₃Db₂₀F₁₁HfOs₁₃Po₂₀TiU₄)Md₄(BkPa₅)
Size 556.7 KB download
First seen 24 days ago
Analyzed 8 days ago
Package pkg:npm/[email protected]
Ecosystem npm
Source registry.npmjs.org
Also detected by 1 source

Referenced by 10 samples

Well-known

notable severity, 98% confident.
lib/ui Vite upstream repository marker
notable severity, 99% confident.
lib/web follow-redirects browser-build exclusion warning

Objectives

notable severity, 95% confident.
execution/interpreter/script PowerShell execution policy bypass

Micro-behaviors

notable severity, 94% confident.
browser-extension Derives an origin from a browser URL
notable severity, 92% confident.
communications/http/client Creates a link resource element
notable severity, 96% confident.
communications/http/request References HTTP 403 denial status
notable severity, 92% confident.
crypto/hash Node.js constant-time comparison call
notable severity, 100% confident.
data/encode Converts buffer to hex string
notable severity, 92% confident.
data/serialize Serializes a payload object as JSON
notable severity, 100% confident.
fs/file/write Node synchronously writes a file
notable severity, 94% confident.
hardware/input Registers a DOM keyboard event listener
notable severity, 93% confident.
os/network Proxy bypass value contains loopback
notable severity, 95% confident.
process/create Worker evaluates inline source string
notable severity, 100% confident.
process/create/shell Executes shell commands synchronously
notable severity, 95% confident.
process/interpreter JavaScript AsyncFunction compiles code

Metadata

20 of 90 traits shown

Identity

SHA-256 618d8d574ecaec329f9910ffba7b16b5c6c6893462f470abddd565df763b1109
Canonical SHA-256 0a178ed2a86ad3b6b9a62bcf0ee09c7b1cfded65677fad4f4ffbe570603d416c
Filename vite-8.2.0.tgz
Package vite
Version 8.2.0
PURL pkg:npm/[email protected]

Origin

Source upload
Ecosystem npm
Domain npmjs.org
URL https://registry.npmjs.org/vite/-/vite-8.2.0.tgz

Timeline

First seen 1 Aug 2026 06:32 UTC
First analyzed 1 Aug 2026 06:34 UTC
Last analyzed 17 Aug 2026 06:04 UTC
Last updated 17 Aug 2026 06:03 UTC

Labeling

Label unknown
Label source upload
Traits version 298c2