Breach404
Back to Insights
Secure Software2 min readJuly 17, 2026

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Attackers have compromised seven npm packages used by developers working with Vite, a popular build tool, to distribute remote access trojans that communicate through blockchain networks to evade detection and maintain control. You should immediately audi

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free