Supply Chain Attack Hits Rspack, Vant npm Packages with Monero Miner

Popular npm packages Rspack and Vant were compromised with malicious code that deployed a Monero miner. Sonatype’s malware detection systems quickly identified and blocked the malicious versions, protecting users. Both Rspack and Vant released clean updates and enhanced security measures following the breach.

Edward Kiledjian @ekiledjian