Skip to content

ViteVenom

Named by 3 kept items in this workspace.

Search every workspace for ViteVenom. It matches the name as written, so it can find other things that share it.

The items that name it 3

  • PolinRider Caused Dozens of npm, Go, PHP Compromises
    writeup2026-07-31

    Referenced in OpenSourceMalware source article title as part of DPRK's PolinRider campaign alongside ChainVeil.

  • The OpenSourceMalware Show #14
    talk2026-07-23

    Follow-up campaign to ChainVeil published by Checkmarx, targeting the Vite ecosystem; linked to PolinRider via shared IOCs.

  • ChainVeil and ViteVenom are DPRK’s PolinRider Campaign
    writeup2026-07-17

    Sequel campaign to ChainVeil published by Checkmarx Zero on July 14, 2026: seven typosquats targeting the Vite ecosystem. Checkmarx assessed with high confidence it shares an operator with ChainVeil. Assessed by OpenSourceMalware to be PolinRider running against the Vite ecosystem.

All threat actors in this workspace.