Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Checkmarx discovered seven malicious npm packages targeting the Vite ecosystem in a campaign called ViteVenom. The attack, an expansion of ChainVeil, uses an unprecedented four-tier blockchain-based command-and-control infrastructure spanning Tron. The packages deliver a remote access trojan (RAT) to compromised systems, marking a significant software supply chain threat.