Skip to content
Threat Feed
Subscribe

Product

Vite (< 4.5.10, 5.4.15, 6.0.12, 6.1.2, 6.2.3)

1 brief RSS
high advisory

Threat Actors Impersonate AI Crawlers to Exfiltrate Sensitive Credentials

Threat actors are using forged User-Agent strings to masquerade as AI crawlers from OpenAI, Anthropic, and other firms to scan for and exfiltrate environment files and cloud credentials from misconfigured web servers.

Vite credential-theft web-scraping scanning reconnaissance
1r 2t 1c