npmhigh
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver RAT
Researchers have uncovered a software supply chain attack involving seven malicious npm packages targeting the Vite frontend tooling ecosystem. These packages, collectively named ViteVenom, were found to employ a sophisticated, multi-tier blockchain-based command-and-control (C2) infrastructure to deliver a remote access trojan (RAT) to compromised systems.