Cybersecurity researchers have uncovered a software supply chain attack involving seven malicious npm packages targeting the Vite frontend tooling ecosystem. This campaign, dubbed ‘ViteVenom,’ expands on the ‘ChainVeil’ operation, which utilized a sophisticated four-tier blockchain-based command-and-control (C2) infrastructure across Tron, BNB Smart Chain, and Ethereum. The malicious packages deliver a remote access Trojan (RAT), posing a significant threat to developers.