vite-plugin-image-analysis

MAL-2026-14480

npmmalware8/25/2026
Description

Malicious code in vite-plugin-image-analysis (npm)

Indicators of Compromise
SHA256 Hashes (3)
8d80c77b7b4e7a90be289a7b97405119318193c25b5429621deeae00f053c77b
b25366a663127e04d26191faf1726924161eb770ca68f649cc1e7e39f0d3b3d6
e61313bbeab91eb687fc7969f9dcc1478d4b672e1f02f91e56fa886e5ea7bd04
References (3)
https://www.npmjs.com/package/vite-plugin-image-analysis/v/1.1.0ossf/malicious-packageshttps://www.npmjs.com/package/vite-plugin-image-analysis/v/1.0.0ossf/malicious-packageshttps://www.npmjs.com/package/vite-plugin-image-analysis/v/1.1.2ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published8/25/2026
Affected Versions
1.1.01.0.01.1.2
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001