MAL-2025-192884

    Dashboard / Malicious Package / MAL-2025-192884

    MAL-2025-192884

    Published: 23 Dec 2025Last Modified: 2 Jan 2026

    Summary: Malicious code in vite-react-setting (npm)

    Details: Source: amazon-inspector (a8a246e42e62b3ccd2cac32fc43c833154af9a78ee11e47c84bad10cf7895b25) The package vite-react-setting was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: vite-react-setting

    Purl: pkg:npm/vite-react-setting

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.7.6
    MAL-2025-192884 | CVE-DB