npm

vite-smart-chunk @2.0.9

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 4:33 PM UTC

Malicious

OSV ID

MAL-2025-49372

Ecosystem

npm

Summary

The package vite-smart-chunk was found to contain malicious code.

Source: amazon-inspector (03c305ef00e7f688f3c3a3f647f19aa629de8f81c0f2d9a2d96ac673edfca0f1)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.