Published Jul 17, 2026, 2:54 PM ET · Updated 4 months ago · 1 source
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
The Hacker News
·
Original Report
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was observed using an "unprecedented" four-tier blockchain-based command-and-control (C2) infrastructure spanning Tron,