vite-dynachunk

MAL-2025-191474

npmmalware11/26/2025
Description

Malicious code in vite-dynachunk (npm)

Indicators of Compromise
SHA256 Hashes (3)
9402a1a80c09793a69e3dc45fab9bf9fb963616e70b8e50d3f46bd65a678c8b4
0a15f2c558d50bf310cbbe09daac2730fcfe1f196c0f0a2184d5adc74d0ec749
2741df1328664730a34f46a6f6f7d79af5b173b05773a8d5543ecb3e24e208c5
References (4)
https://github.com/advisories/GHSA-f3jr-c664-4426OSVhttps://npmjs.com/package/vite-dynachunkOSVhttps://security.snyk.io/vuln/SNYK-JS-VITEDYNACHUNK-14114718OSVhttps://socket.dev/blog/north-korea-contagious-interview-npm-attacksOSV
Details
Ecosystemnpm
Attack Typemalware
Published11/26/2025
Aliases
GHSA-f3jr-c664-4426SNYK-JS-VITEDYNACHUNK-14114718
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001