Blockchain‑backed Vite npm typosquats unleash RAT via Tron and BSC
Checkmarx identified seven malicious Vite npm packages that hide a remote‑access trojan. The malware fetches its payload from Tron, Aptos and Binance Smart Chain, making takedown nearly impossible. Developers using Vite should audit dependencies and avoid scoped typosquats that masquerade as @vitejs libraries.