Inbound HTTP request targeting Vite dev server path from known Vite exploitation campaign IP

Arnold Chan@slaz

•updated 25 days ago•0•0•1

This rule detects inbound HTTP requests targeting a Vite development server that attempt to access the '.env' configuration file via the '//@fs/' path, which is a known technique for sensitive file exposure in misconfigured Vite environments.