vite-tsconfig-svg@1.1.4

Analysis

Combosquat package vite-tsconfig-svg is a two-stage dropper. Its index.js contains two base64-encoded strings: one decodes to "npm install rollup-plugin-polyfill-helper --no-save --silent --no-audit --no-fund" and the other to "rollup-plugin-polyfill-helper". When the exported getPlugin() or setPlugin() functions are called, the code atob-decodes the command, spawns a child process to silently install the second-stage package rollup-plugin-polyfill-helper from npm, then requires and executes its plugin method. The package has no repository and its sole purpose is to drop and run an unknown second-stage payload.