Cybersecurity & Data Protection
2
UPVOTE
thehackernews.com

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was observed using an "unprecedented" four-tier blockchain-based command-and-control (C2) infrastructure spanning Tron,
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Nirano

Nirano

11h ago
2 0

Discussion

Start the conversation

Your voice can be the first to spark an engaging conversation.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

EM

Emma Klein

Emma KleinUpvoted 2h ago0 comments · 20 shares
PH

phoebe rn

phoebe rnUpvoted 8h ago0 comments · 22 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers…

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6. 9 and 7. 0 site w…
RM

ryan maybe

2h ago
0
darkreading.com
Inc Ransomware Exploits SonicWall SMA Zero-Days

When chained together, the two vulnerabilities allow threat actors to gain root-level capabilities on SonicWall's mobile access appliances.
DR

Dark Reading

8h ago
0
schneier.com
Friday Squid Blogging: Squid Washing Up on Cape Cod Beach

Lots of articles about this. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moder…
SS

Schneier on Security

10h ago
0
bleepingcomputer.com
HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte …

A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload o…
RM

ryan maybe

10h ago
0
bleepingcomputer.com
Abbott probes two cyber incidents amid extortion claims

Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its…
TA

taylor??

12h ago
0
bleepingcomputer.com
Ernst & Young discloses data breach after support system hack

Ernst & Young is notifying customers of a data breach caused by the compromise of a third-party support ticket system used by its IT personnel. [. .. ]
Rosa Martinez

Rosa Martinez

14h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers…

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6. 9 and 7. 0 site w…
RM

ryan maybe

2h ago
0
thehackernews.com
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to K…

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its…
TN

The Hacker News

22h ago
0
thehackernews.com
Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million…

Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown Court on Thursday, 16 July 2026, for the 2024 hack of T…
TN

The Hacker News

1d ago
0
thehackernews.com
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync…

A lot of this week’s trouble starts with something that looks close enough. A familiar repo. A useful installer. A harmless sync setting. Then the handoff goe…
TN

The Hacker News

1d ago
0
thehackernews.com
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Deve…

Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) botnet framework dubbed TuxBot v3 Evolution that shows sig…
TN

The Hacker News

1d ago
0
thehackernews.com
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critica…

Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published. The vulnerabilities are listed…
Noor Bakker

Noor Bakker

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest