vite-plugin-modelnpm

The CJS entrypoint dist/index.js top-level requires bytenode and loads a sibling V8 bytecode blob dist/index.jsc, then injects a hidden Model.resetor() that instantiates a class from that bytecode and immediately calls its queryDBConnect() method on require(). The bytecode contains axios, atob, and node:module internals (_compile, _nodeModulePaths), together with a reversed-base64 literal that decodes to https://c0uxnElubanuzwji03vsfrj.m.pipedream.net — an HTTPS Pipedream webhook. The runtime pattern fetches the webhook response, decodes it, and compiles it as a new Node module, executing attacker-controlled code on the installer's machine as soon as any consumer imports the package. Additional indicators corroborate the hostile intent: the ESM twin dist/index.mjs is clean while only the CJS main is tampered; the package advertises itself as a Vite plugin but the shipped code is an unrelated MobX-style store plus a MySQL-flavored DivbloxDatabaseConnector cover-story class; and dist/index.js pulls in an undeclared 'oubliette' dependency while the bytecode requires an undeclared 'axios', both consistent with attacker scaffolding to complete the exec chain via name-squat or hoist collision.

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.