The npm package @uw010010/vite-tree is a malicious typosquatting package impersonating the legitimate vite package. It contains obfuscated code that executes arbitrary attacker-controlled code on any system where the package's vite binary is run. This includes making network requests to attacker endpoints, decoding and evaluating payloads, and spawning detached background processes for persistence. Systems with this package installed should be considered fully compromised.