Dossier
ViteVenom
Coverage of ViteVenom in the Nexus archive.
- Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Cybersecurity researchers discovered seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The packages, part of a campaign codenamed ViteVenom by Checkmarx, expand the ChainVeil operation, which uses a blockchain-based command-and-control infrastructure spanning Tron.