2026年7月17日 14:54 ET 发布 · 更新于 4 个月前 · 1 个来源
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
The Hacker News
·
原始报道
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was observed using an "unprecedented" four-tier blockchain-based command-and-control (C2) infrastructure spanning Tron,
原文