> TritonInfoSec News
Home / Jul 19, 2026 / Story
0
#7 The Hacker News general July 17, 2026 at 18:54 UTC

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

By [email protected] (The Hacker News)

AI Summary

Checkmarx researchers discovered seven malicious npm packages (campaign dubbed ViteVenom) targeting the Vite frontend ecosystem as an extension of the ChainVeil supply chain attack, which uses a four-tier blockchain-based C2 infrastructure spanning the Tron network to deliver a remote access trojan. The use of blockchain C2 makes takedowns significantly harder and represents a sophisticated escalation in supply chain attack tradecraft.

Read full article → https://thehackernews.com/2026/07/seven-malicious-…

Relevance score: 77.0/100

# More from July 19

  1. 1
    WordPress Core "wp2shell" RCE flaws get public exploits, patch now BleepingComputer
  2. 2
    Update now: 7-Zip fixes RCE flaw exploitable with malicious archives BleepingComputer
  3. 3
    Fresh SharePoint Vulnerability Exploited Soon After Disclosure SecurityWeek
  4. 4
    Leading members of Scattered Spider sentenced in UK to 66 months in jail CyberScoop
  5. 5
    HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload BleepingComputer
  6. 6
    ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files The Hacker News
  7. 8
    Ernst & Young discloses data breach after support system hack BleepingComputer
  8. 9
    New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage The Hacker News
  9. 10
    Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man The Hacker News