Finds vulnerable Vite development environment

• Severity: critical
  Fingerprint: ebb688b314690472074e858154d682968e0922452ceeec0a3a71c2b3e2b148d6
  

  Found vulnerable ViteJS development environment:
  Affected by CVE-2025-30208
  Environment:
  LESSOPEN=| /usr/bin/lesspipe %s
  VSCODE_CWD=/root
  pm_out_log_path=/root/.pm2/logs/walet-out.log
  HOST_HEADER=x-forwarded-host
  VSCODE_ESM_ENTRYPOINT=vs/workbench/api/node/extensionHostProcess
  npm_package_devDependencies_sveltekit_superforms=^2.15.1
  npm_package_devDependencies_vitest=^1.6.0
  USER=root
  SSH_CLIENT=84.48.111.125 50242 22
  VSCODE_NLS_CONFIG={\"userLocale\":\"en\",\"osLocale\":\"en\",\"resolvedLanguage\":\"en\",\"defaultMessagesFile\":\"/root/.cursor-server/cli/servers/Stable-ce371ffbf5e240ca47f4b5f3f20efed084991120/server/out/nls.messages.json\",\"locale\":\"en\",\"availableLanguages\":{}}
  npm_config_user_agent=pnpm/9.4.0 npm/? node/v18.5.0 linux x64
  restart_time=2
  VSCODE_HANDLES_UNCAUGHT_ERRORS=true
  npm_package_devDependencies__sd_jwt_decode=latest
  npm_package_devDependencies_bits_ui=^0.21.10
  ORIGIN=https://symfoni.id
  XDG_SESSION_TYPE=tty
  npm_package_devDependencies__credo_ts_askar=latest
  npm_package_devDependencies__sveltejs_vite_plugin_svelte=^3.1.1
  npm_package_devDependencies_svelte_sonner=^0.3.24
  npm_package_devDependencies_vite=^5.3.1
  npm_node_execpath=/root/.local/share/pnpm/pnpm
  PM2_USAGE=CLI
  SHLVL=2
  BROWSER=/root/.cursor-server/cli/servers/Stable-ce371ffbf5e240ca47f4b5f3f20efed084991120/server/bin/helpers/browser.sh
  npm_package_devDependencies__credo_ts_tenants=latest
  npm_package_devDependencies_formsnap=^1.0.1
  HOME=/root
  username=root
  OLDPWD=/var/www/symfoni.solutions
  npm_package_devDependencies__eslint_js=^9.5.0
  npm_package_devDependencies__typescript_eslint_parser=^7.13.1
  npm_package_devDependencies_clsx=^2.1.1
  PM2_HOME=/root/.pm2
  created_at=1765293084812
  VSCODE_IPC_HOOK_CLI=/run/user/0/vscode-ipc-518c1b28-05c0-4065-8c46-dde4d1a92b33.sock
  npm_package_devDependencies__internationalized_date=^3.5.4
  PROTOCOL_HEADER=x-forwarded-proto
  pm_cwd=/root/fagsystem-wallet
  npm_package_devDependencies_paneforge=^0.0.4
  npm_package_devDependencies_svelte_preprocess=^6.0.1
  npm_package_engines_node=>=22.3.0
  npm_package_devDependencies_oslo=^1.2.0
  npm_package_devDependencies_svelte_check=^3.8.0
  namespace=default
  version=N/A
  SSL_CERT_FILE=/usr/lib/ssl/cert.pem
  npm_package_scripts_check=svelte-kit sync && svelte-check --tsconfig ./tsconfig.json
  npm_package_devDependencies_date_fns=^3.6.0
  filter_env=
  NO_COLOR=1
  DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/0/bus
  pm_exec_path=/usr/bin/bash
  npm_package_devDependencies_mode_watcher=^0.3.0
  npm_package_dependencies_dotenv=^16.4.5
  npm_config_engine_strict=true
  unstable_restarts=0
  pm_id=2
  kill_retry_time=100
  npm_package_devDependencies_lucide_svelte=^0.371.0
  npm_package_devDependencies_tailwindcss=^3.4.4
  npm_package_devDependencies_typescript=^5.4.5
  npm_package_devDependencies__credo_ts_node=latest
  VSCODE_L10N_BUNDLE_LOCATION=
  npm_package_scripts_dev=vite dev --port 3000 \"--host\" \"--port\" \"3001\"
  npm_package_devDependencies__playwright_test=^1.44.1
  npm_package_devDependencies_zod=^3.23.8
  LOGNAME=root
  FORCE_COLOR=0
  node_args=
  npm_package_type=module
  versioning=null
  _=/root/.local/share/pnpm/pnpm
  autostart=true
  VSCODE_HANDLES_SIGPIPE=true
  npm_package_private=true
  npm_package_scripts_check_watch=svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch
  npm_package_devDependencies__credo_ts_core=latest
  npm_package_devDependencies__sveltejs_adapter_node=^5.1.1
  npm_package_devDependencies_autoprefixer=^10.4.19
  XDG_SESSION_CLASS=user
  npm_package_scripts_lint=eslint .
  npm_package_devDependencies__typescript_eslint_eslint_plugin=^7.13.1
  npm_package_devDependencies_vaul_svelte=^0.3.1
  npm_config_registry=https://registry.npmjs.org/
  TERM=dumb
  XDG_SESSION_ID=47
  VSCODE_CLI_REQUIRE_TOKEN=fe7de600-ec56-43cc-9b45-22e82709d658
  exec_mode=fork_mode
  npm_package_devDependencies_chance=^1.1.11
  NODE_APP_INSTANCE=0
  axm_monitor=[object Object]
  windowsHide=true
  npm_package_devDependencies_sveltekit_flash_message=^2.4.4
  COMPOSER_NO_INTERACTION=1
  status=launching
  npm_package_devDependencies__hyperledger_aries_askar_nodejs=latest
  PATH=/root/fagsystem-wallet/node_modules/.bin:/snapshot/dist/node-gyp-bin:/root/.cursor-server/cli/servers/Stable-ce371ffbf5e240ca47f4b5f3f20efed084991120/server/bin/remote-cli:/root/.local/share/pnpm:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin
  exec_interpreter=none
  VSCODE_AGENT_FOLDER=/root/.cursor-server
  watch=false
  npm_package_name=fagsystem-wallet
  npm_package_devDependencies_typescript_eslint=^7.13.1
  NODE=/root/.local/share/pnpm/pnpm
  prev_restart_delay=0
  XDG_RUNTIME_DIR=/run/user/0
  npm_package_scripts_test_integration=playwright test
  npm_package_devDependencies_lowdb=^7.0.1
  npm_config_frozen_lockfile=
  axm_options=[object Object]
  SSL_CERT_DIR=/usr/lib/ssl/certs
  CURSOR_AGENT=1
  axm_dynamic=[object Object]
  npm_package_scripts_test_unit=vitest
  npm_package_devDependencies_postcss_load_config=^5.1.0
  LANG=C.UTF-8
  vizion=true
  pm_pid_path=/root/.pm2/pids/walet-2.pid
  pm_err_log_path=/root/.pm2/logs/walet-error.log
  npm_package_devDependencies_eslint=^9.5.0
  treekill=true
  LS_COLORS=
  npm_package_devDependencies_oidc_client_ts=^3.0.1
  npm_package_dependencies_svelte_icons=^2.1.0
  npm_lifecycle_script=vite dev --port 3000 \"--host\" \"--port\" \"3001\"
  SSH_AUTH_SOCK=/run/user/0/vscode-ssh-auth-sock-589650201
  npm_package_scripts_test=npm run test:integration && npm run test:unit
  npm_package_devDependencies__sveltejs_kit=^2.5.16
  npm_package_devDependencies_tailwind_variants=^0.2.1
  SHELL=/bin/bash
  pmx=true
  unique_id=50955fe5-2978-471c-9077-772b9ac36566
  npm_package_version=0.0.1
  npm_lifecycle_event=dev
  NODE_PATH=/root/fagsystem-wallet/node_modules/.pnpm/vite@5.3.1_@types+node@20.14.5_terser@5.31.1/node_modules/vite/bin/node_modules:/root/fagsystem-wallet/node_modules/.pnpm/vite@5.3.1_@types+node@20.14.5_terser@5.31.1/node_modules/vite/node_modules:/root/fagsystem-wallet/node_modules/.pnpm/vite@5.3.1_@types+node@20.14.5_terser@5.31.1/node_modules:/root/fagsystem-wallet/node_modules/.pnpm/node_modules
  automation=true
  npm_package_scripts_build=vite build
  npm_package_devDependencies__sphereon_oid4vci_common=latest
  npm_package_devDependencies_svelte=^4.2.18
  npm_package_devDependencies_tslib=^2.6.3
  npm_package_dependencies_uuid=^10.0.0
  exit_code=0
  LESSCLOSE=/usr/bin/lesspipe %s %s
  vizion_running=false
  args=-c,ORIGIN=https://symfoni.id PROTOCOL_HEADER=x-forwarded-proto HOST_HEADER=x-forwarded-host pnpm dev --host --port 3001
  npm_package_devDependencies__credo_ts_openid4vc=latest
  npm_package_devDependencies_globals=^15.6.0
  instance_var=NODE_APP_INSTANCE
  name=walet
  npm_package_devDependencies__types_chance=^1.1.6
  npm_package_devDependencies_openapi_fetch=^0.9.7
  PWD=/root/fagsystem-wallet
  npm_package_devDependencies_embla_carousel_svelte=^8.1.5
  npm_package_devDependencies_tailwind_merge=^2.3.0
  npm_execpath=/root/.local/share/pnpm/pnpm
  env=[object Object]
  SSH_CONNECTION=84.48.111.125 50242 159.223.231.203 22
  XDG_DATA_DIRS=/usr/local/share:/usr/share:/var/lib/snapd/desktop
  npm_package_devDependencies_cmdk_sv=^0.0.17
  km_link=false
  instances=1
  axm_actions=
  merge_logs=true
  npm_package_scripts_api_paradym=openapi-typescript https://api.paradym.id/openapi-docs.json -o ./src/api/paradym-api.d.ts
  npm_package_devDependencies__sveltejs_adapter_auto=^3.2.2
  npm_package_devDependencies_postcss=^8.4.38
  npm_command=run-script
  PNPM_SCRIPT_SRC_DIR=/root/fagsystem-wallet
  autorestart=true
  npm_package_scripts_preview=vite preview
  npm_package_devDependencies_openapi_typescript=^6.7.6
  _ZO_DOCTOR=0
  PNPM_HOME=/root/.local/share/pnpm
  pm_uptime=1765293084955
  INIT_CWD=/root/fagsystem-wallet
  

  Found on 2025-12-10 13:06

• Severity: critical
  Fingerprint: ebb688b314690472074e858154d682968e0922452ceeec0a181b945ef274c4e3
  

  Found vulnerable ViteJS development environment:
  Affected by CVE-2025-30208
  Environment:
  LESSOPEN=| /usr/bin/lesspipe %s
  pm_out_log_path=/root/.pm2/logs/walet-out.log
  HOST_HEADER=x-forwarded-host
  npm_package_devDependencies_sveltekit_superforms=^2.15.1
  npm_package_devDependencies_vitest=^1.6.0
  USER=root
  SSH_CLIENT=80.202.244.32 65227 22
  npm_config_user_agent=pnpm/9.4.0 npm/? node/v18.5.0 linux x64
  restart_time=6
  npm_package_devDependencies__sd_jwt_decode=latest
  npm_package_devDependencies_bits_ui=^0.21.10
  ORIGIN=https://symfoni.id
  XDG_SESSION_TYPE=tty
  GIT_ASKPASS=/root/.cursor-server/cli/servers/Stable-a915e3254b1192ce240c078da83fc1768a6e3e90/server/extensions/git/dist/askpass.sh
  npm_package_devDependencies__credo_ts_askar=latest
  npm_package_devDependencies__sveltejs_vite_plugin_svelte=^3.1.1
  npm_package_devDependencies_svelte_sonner=^0.3.24
  npm_package_devDependencies_vite=^5.3.1
  npm_node_execpath=/root/.local/share/pnpm/pnpm
  PM2_USAGE=CLI
  SHLVL=2
  BROWSER=/root/.cursor-server/cli/servers/Stable-a915e3254b1192ce240c078da83fc1768a6e3e90/server/bin/helpers/browser.sh
  npm_package_devDependencies__credo_ts_tenants=latest
  npm_package_devDependencies_formsnap=^1.0.1
  HOME=/root
  username=root
  OLDPWD=/root/fagsystem-wallet
  npm_package_devDependencies__eslint_js=^9.5.0
  npm_package_devDependencies__typescript_eslint_parser=^7.13.1
  npm_package_devDependencies_clsx=^2.1.1
  TERM_PROGRAM_VERSION=0.35.1
  PM2_HOME=/root/.pm2
  created_at=1729497602163
  VSCODE_IPC_HOOK_CLI=/run/user/0/vscode-ipc-edbd7aa6-38e7-450d-bb7b-bade0a444761.sock
  npm_package_devDependencies__internationalized_date=^3.5.4
  PROTOCOL_HEADER=x-forwarded-proto
  pm_cwd=/root/fagsystem-wallet
  npm_package_devDependencies_paneforge=^0.0.4
  npm_package_devDependencies_svelte_preprocess=^6.0.1
  npm_package_engines_node=>=22.3.0
  VSCODE_GIT_ASKPASS_MAIN=/root/.cursor-server/cli/servers/Stable-a915e3254b1192ce240c078da83fc1768a6e3e90/server/extensions/git/dist/askpass-main.js
  npm_package_devDependencies_oslo=^1.2.0
  npm_package_devDependencies_svelte_check=^3.8.0
  namespace=default
  VSCODE_GIT_ASKPASS_NODE=/root/.cursor-server/cli/servers/Stable-a915e3254b1192ce240c078da83fc1768a6e3e90/server/node
  version=N/A
  SSL_CERT_FILE=/usr/lib/ssl/cert.pem
  npm_package_scripts_check=svelte-kit sync && svelte-check --tsconfig ./tsconfig.json
  npm_package_devDependencies_date_fns=^3.6.0
  filter_env=
  DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/0/bus
  pm_exec_path=/usr/bin/bash
  npm_package_devDependencies_mode_watcher=^0.3.0
  npm_package_dependencies_dotenv=^16.4.5
  npm_config_engine_strict=true
  COLORTERM=truecolor
  unstable_restarts=0
  pm_id=0
  kill_retry_time=100
  npm_package_devDependencies_lucide_svelte=^0.371.0
  npm_package_devDependencies_tailwindcss=^3.4.4
  npm_package_devDependencies_typescript=^5.4.5
  npm_package_devDependencies__credo_ts_node=latest
  npm_package_scripts_dev=vite dev --port 3000 \"--host\"
  npm_package_devDependencies__playwright_test=^1.44.1
  npm_package_devDependencies_zod=^3.23.8
  LOGNAME=root
  node_args=
  npm_package_type=module
  versioning=null
  _=/root/.local/share/pnpm/pnpm
  autostart=true
  npm_package_private=true
  npm_package_scripts_check_watch=svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch
  npm_package_devDependencies__credo_ts_core=latest
  npm_package_devDependencies__sveltejs_adapter_node=^5.1.1
  npm_package_devDependencies_autoprefixer=^10.4.19
  XDG_SESSION_CLASS=user
  npm_package_scripts_lint=eslint .
  npm_package_devDependencies__typescript_eslint_eslint_plugin=^7.13.1
  npm_package_devDependencies_vaul_svelte=^0.3.1
  npm_config_registry=https://registry.npmjs.org/
  TERM=xterm-256color
  XDG_SESSION_ID=1
  exec_mode=fork_mode
  npm_package_devDependencies_chance=^1.1.11
  NODE_APP_INSTANCE=0
  axm_monitor=[object Object]
  windowsHide=true
  npm_package_devDependencies_sveltekit_flash_message=^2.4.4
  status=launching
  npm_package_devDependencies__hyperledger_aries_askar_nodejs=latest
  PATH=/root/fagsystem-wallet/node_modules/.bin:/snapshot/dist/node-gyp-bin:/root/.cursor-server/cli/servers/Stable-a915e3254b1192ce240c078da83fc1768a6e3e90/server/bin/remote-cli:/root/.local/share/pnpm:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin
  exec_interpreter=none
  watch=false
  npm_package_name=fagsystem-wallet
  npm_package_devDependencies_typescript_eslint=^7.13.1
  NODE=/root/.local/share/pnpm/pnpm
  XDG_RUNTIME_DIR=/run/user/0
  npm_package_scripts_test_integration=playwright test
  npm_package_devDependencies_lowdb=^7.0.1
  npm_config_frozen_lockfile=
  axm_options=[object Object]
  SSL_CERT_DIR=/usr/lib/ssl/certs
  axm_dynamic=[object Object]
  npm_package_scripts_test_unit=vitest
  npm_package_devDependencies_postcss_load_config=^5.1.0
  LANG=C.UTF-8
  vizion=true
  pm_pid_path=/root/.pm2/pids/walet-0.pid
  pm_err_log_path=/root/.pm2/logs/walet-error.log
  npm_package_devDependencies_eslint=^9.5.0
  treekill=true
  LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=00:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.avif=01;35:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.webp=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:*~=00;90:*#=00;90:*.bak=00;90:*.crdownload=00;90:*.dpkg-dist=00;90:*.dpkg-new=00;90:*.dpkg-old=00;90:*.dpkg-tmp=00;90:*.old=00;90:*.orig=00;90:*.part=00;90:*.rej=00;90:*.rpmnew=00;90:*.rpmorig=00;90:*.rpmsave=00;90:*.swp=00;90:*.tmp=00;90:*.ucf-dist=00;90:*.ucf-new=00;90:*.ucf-old=00;90:
  VSCODE_GIT_IPC_HANDLE=/run/user/0/vscode-git-95497a2c92.sock
  TERM_PROGRAM=vscode
  npm_package_devDependencies_oidc_client_ts=^3.0.1
  npm_package_dependencies_svelte_icons=^2.1.0
  npm_lifecycle_script=vite dev --port 3000 \"--host\"
  SSH_AUTH_SOCK=/tmp/ssh-AtJdpZSdO5/agent.997
  npm_package_scripts_test=npm run test:integration && npm run test:unit
  npm_package_devDependencies__sveltejs_kit=^2.5.16
  npm_package_devDependencies_tailwind_variants=^0.2.1
  SHELL=/bin/bash
  pmx=true
  unique_id=692a074a-58bf-4ed0-8714-b7f4daeb0823
  npm_package_version=0.0.1
  npm_lifecycle_event=dev
  NODE_PATH=/root/fagsystem-wallet/node_modules/.pnpm/vite@5.3.1_@types+node@20.14.5_terser@5.31.1/node_modules/vite/bin/node_modules:/root/fagsystem-wallet/node_modules/.pnpm/vite@5.3.1_@types+node@20.14.5_terser@5.31.1/node_modules/vite/node_modules:/root/fagsystem-wallet/node_modules/.pnpm/vite@5.3.1_@types+node@20.14.5_terser@5.31.1/node_modules:/root/fagsystem-wallet/node_modules/.pnpm/node_modules
  automation=true
  npm_package_scripts_build=vite build
  npm_package_devDependencies__sphereon_oid4vci_common=latest
  npm_package_devDependencies_svelte=^4.2.18
  npm_package_devDependencies_tslib=^2.6.3
  npm_package_dependencies_uuid=^10.0.0
  exit_code=1
  LESSCLOSE=/usr/bin/lesspipe %s %s
  vizion_running=false
  args=-c,ORIGIN=https://symfoni.id PROTOCOL_HEADER=x-forwarded-proto HOST_HEADER=x-forwarded-host pnpm dev --host
  npm_package_devDependencies__credo_ts_openid4vc=latest
  npm_package_devDependencies_globals=^15.6.0
  instance_var=NODE_APP_INSTANCE
  VSCODE_GIT_ASKPASS_EXTRA_ARGS=
  name=walet
  npm_package_devDependencies__types_chance=^1.1.6
  npm_package_devDependencies_openapi_fetch=^0.9.7
  PWD=/root/fagsystem-wallet
  npm_package_devDependencies_embla_carousel_svelte=^8.1.5
  npm_package_devDependencies_tailwind_merge=^2.3.0
  npm_execpath=/root/.local/share/pnpm/pnpm
  env=[object Object]
  SSH_CONNECTION=80.202.244.32 65227 159.223.231.203 22
  XDG_DATA_DIRS=/usr/local/share:/usr/share:/var/lib/snapd/desktop
  npm_package_devDependencies_cmdk_sv=^0.0.17
  km_link=false
  axm_actions=
  merge_logs=true
  npm_package_scripts_api_paradym=openapi-typescript https://api.paradym.id/openapi-docs.json -o ./src/api/paradym-api.d.ts
  npm_package_devDependencies__sveltejs_adapter_auto=^3.2.2
  npm_package_devDependencies_postcss=^8.4.38
  npm_command=run-script
  PNPM_SCRIPT_SRC_DIR=/root/fagsystem-wallet
  autorestart=true
  npm_package_scripts_preview=vite preview
  npm_package_devDependencies_openapi_typescript=^6.7.6
  PNPM_HOME=/root/.local/share/pnpm
  pm_uptime=1760830512096
  INIT_CWD=/root/fagsystem-wallet
  

  Found on 2025-12-02 06:07