Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

A mass-scanning campaign has been identified targeting internet-exposed Vite development servers. Attackers are exploiting a flaw in Vite to extract sensitive cloud credentials and configuration data. The campaign specifically targets Amazon Web Services (AWS) and Microsoft Azure instances. Infrastructure state files are also being siphoned as part of the attack. The operation is automated and designed to scan broadly for exposed Vite dev servers. F5 Labs researchers disclosed the details of this campaign. The attack highlights risks of exposing development servers to the public internet.