Bottom line: Vite deployments must be patched immediately to prevent exploitation of the critical vulnerability.
What's happening: Researchers from Google's V8 team discovered a critical vulnerability in Vite in late
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments to siphon sensitive data from Amazon Web Services (AWS) and other cloud providers using a critical vulnerability in Vite (CVE-2022-20429).
Source: The Hacker News