vite-plugin-bomb-extend@2.0.0

Analysis

Package vite-plugin-bomb-extend@2.0.0 is a destructive time-bomb targeting Vue/frontend development environments. When loaded as a Vite plugin, its default export checks the system date and conditionally executes destructive commands within two date windows. Between 2023/06/19 and 2023/06/30 it recursively deletes dist/ directories of vue, vue-router, and ant-design-vue from the project's node_modules. After 2023/07/07 it additionally deletes files from lib-flexible, less-loader, less, and vite-plugin-vue-setup-extend, then forces a system shutdown via 'shutdown -s -t 5'. No legitimate functionality — the package has an empty description and no README.