The package @vite-mcp/[email protected] impersonates the legitimate vite package by mimicking its name, author, repository, and CLI entry point. It ships a copy of the vite source tree with appended obfuscated code that decodes and executes a remote payload at runtime. This payload is fetched via HTTPS GET and JSON-RPC POST requests, XOR-decoded, then executed using eval() and child_process.spawn() in a hidden detached process. The malicious loader activates whenever the 'vite' binary is run, enabling the attacker to execute arbitrary code remotely on any system running this CLI, constituting a deliberate supply-chain attack against developers.

This vulnerability allows an attacker to achieve arbitrary remote code execution on developer or build hosts that run the compromised CLI from the malicious package. The attacker can execute hidden processes and potentially control the affected environment, leading to compromise of development infrastructure and downstream software supply chains.

No official patch or remediation is currently documented. Users should avoid installing or running the @vite-mcp/vite-type package, especially version 6.44.1. Verify package authenticity by using official vite packages from trusted sources. Monitor for and remove any instances of this malicious package from development environments. Patch status is not yet confirmed — check the vendor or npm advisories for current remediation guidance.