Hackers target exposed Vite dev servers to steal AWS, Azure secrets
BleepingComputer published a report on September 14, 2026 describing hackers targeting exposed Vite dev servers in order to steal AWS and Azure secrets. According to the source, the activity centers on Vite development servers that are exposed, with attackers seeking cloud credentials belonging to Amazon Web Services and Microsoft Azure. The report identifies Vite dev servers as the entry point and AWS and Azure secrets as the objective of the campaign. The source does not name a specific threat group, does not list specific CVE identifiers, and does not describe particular exploitation techniques, affected versions, or the number of compromised environments. It also does not state whether any remediation has been issued or whether the campaign is ongoing. What the source does establish is the pairing of exposed Vite dev servers with the theft of AWS and Azure secrets, which places cloud credentials stored in or reachable from development environments at the center of the reported activity.
The report indicates that exposed Vite dev servers are being used to obtain AWS and Azure secrets, putting cloud credentials reachable from development environments at risk.