github.com/vitejs/vite · 82e7aa0
90/ 100
No threats observedNo threats observed: The observed run produced no behaviour deductions; reachable code still had flagged locations not seen in action. Scanned 23 Oct 2026.
NetworkRegistry only
Registry traffic only
Files250 changes
/home/cr/.local/share/…73e5a4/_tmp_2496_0799f3ca
CodeNothing taken off
no code deduction
Score
90 / 1001000
Nothing was taken off for what the code did or what running it showed.
What it did
488 events in 30.6sFetched6.5s
12985638 bytes fetched inside the VM from codeload.github.com in 3054 ms; commit id verified; egress restored
Read12.0s
0 scanner finding(s)
Checked12.0s
0 locked dependencies, 0 malicious
Jev25.6s
Answered questions from the evidence
Sandbox25.6s
install completed, entry completed, 200 forged call(s)
Score25.6s
90 No threats observed
Network
nothing real left the machineAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
Show all 200 calls
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@antfu%2Finstall-pkg
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@adobe%2Fcss-tools
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@alloc%2Fquick-lru
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fcode-frame
0 B sent in install
GETForged registry
registry.npmjs.org/@11ty%2Fgray-matter
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fcompat-data
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fgenerator
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-c…class-features-plugin
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fcore
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-annotate-as-pure
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-compilation-targets
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-c…egexp-features-plugin
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-replace-supers
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-m…pression-to-functions
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelpers
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-globals
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-d…ine-polyfill-provider
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-validator-option
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-wrap-function
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-module-imports
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-b…in-computed-class-key
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-o…imise-call-expression
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-module-transforms
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-plugin-utils
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-b…structuring-rhs-array
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-b…eld-initializer-scope
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-s…tax-import-assertions
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-b…lds-redefine-readonly
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-s…ax-unicode-sets-regex
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…sform-arrow-functions
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-s…tax-import-attributes
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…c-generator-functions
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-block-scoping
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…form-class-properties
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…rm-async-to-generator
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-r…ap-async-to-generator
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-classes
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…rm-class-static-block
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-string-parser
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-destructuring
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…m-computed-properties
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-s…t-expression-wrappers
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…t-resource-management
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fhelper-validator-identifier
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…apturing-groups-regex
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…export-namespace-from
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…ponentiation-operator
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-function-name
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fparser
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-for-of
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…r-expression-literals
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…form-modules-commonjs
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…-assignment-operators
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-json-strings
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…form-modules-systemjs
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-modules-umd
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…h-coalescing-operator
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-new-target
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-b…n-function-expression
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-b…-in-optional-chaining
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-p…te-property-in-object
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…apturing-groups-regex
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…orm-property-literals
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…rm-object-rest-spread
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…orm-numeric-separator
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-object-super
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…te-property-in-object
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…form-regexp-modifiers
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-literals
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-parameters
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-regenerator
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…nsform-reserved-words
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…-shorthand-properties
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…lock-scoped-functions
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-spread
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…orm-template-literals
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-typeof-symbol
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…sform-unicode-escapes
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…rm-unicode-sets-regex
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…nsform-dynamic-import
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…nicode-property-regex
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-unicode-regex
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…nsform-duplicate-keys
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Ftraverse
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-dotall-regex
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Ftypes
0 B sent in install
GETForged registry
registry.npmjs.org/@clack%2Fcore
0 B sent in install
GETForged registry
registry.npmjs.org/@clack%2Fprompts
0 B sent in install
GETForged registry
registry.npmjs.org/@bufbuild%2Fprotobuf
0 B sent in install
GETForged registry
registry.npmjs.org/@devframes%2Fhub-ui
0 B sent in install
GETForged registry
registry.npmjs.org/@cspotcode%2Fsource-map-support
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fpreset-env
0 B sent in install
GETForged registry
registry.npmjs.org/@cloudflare%2Fworkerd-darwin-arm64
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-transform-modules-amd
0 B sent in install
GETForged registry
registry.npmjs.org/@devframes%2Fagentic
0 B sent in install
AAAAForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
AForged dns
registry.npmjs.org
0 B sent in install
GETForged registry
registry.npmjs.org/@conventional-changelog%2Fgit-client
0 B sent in install
GETForged registry
registry.npmjs.org/@devframes%2Fhub
0 B sent in install
GETForged registry
registry.npmjs.org/@cloudflare%2Fworkerd-windows-64
0 B sent in install
GETForged registry
registry.npmjs.org/@devframes%2Fjson-render
0 B sent in install
GETForged registry
registry.npmjs.org/@conventional-changelog%2Ftemplate
0 B sent in install
GETForged registry
registry.npmjs.org/@babel%2Fplugin-t…sform-private-methods
0 B sent in install
Luna's report
The run showed no behaviour findings, but flagged code was not seen in action and one code window was judged suspicious. Pin the scanned version. Most important limit: behaviour outside the observed install and entry windows was not verified.
We installed the repository and ran its entry point in a throwaway sandbox, while scanning the code the entry point could reach. The run produced no behaviour findings; the repository's own install script failed after its dependencies installed.
What it ran
Installedpnpm · 0 packages · 7.6s
Entry pointenv -i HOME=/hom…T=1 FAKETIME_NO_CAC
NetworkRegistry only
MachineDestroyed after the scan
Jev's answers
answered from the evidenceInstall check
Install-time code does not use the network
Install-time code does not read credentials
Show all 5 answers
Install-time code runs other programs or payloads
Install-time code is not obfuscated
Jev judged this code harmless
package.jsonDocs check
The docs do not say it makes no network calls
The docs do not say it has no side effects
Show all 3 answers
What it did fits what its docs say it is for
Flagged code check
Jev judged this code harmless
Jev judged this code suspicious
Not verified
Behaviour outside the observed install and entry windows
Code paths not triggered by install or the entry point
Show all 4 items
Payloads gated on calendar dates past the accelerated clock window, or on hosts that need real responses
The repo's own install script failed after its dependencies installed (the repo's own lifecycle script failed (exit 1): /work/src postinstall: `simple-git-hooks` exited with exit status: 127); what ran before it was observed and scored
Reputation
GitHubOwner 6 years old
GitHubOwner established (over a year, 3+ public repositories)
GitHub83K stars
GitHub32 public repos
Shown apart from the code and behaviour findings.