Hackers target exposed Vite dev servers to steal AWS, Azure secrets

Your dev server was never meant to face the internet, and attackers know it. F5 logged over 800 attacks and roughly 32,000 events in a single month against exposed Vite servers, appending things like ?raw to slip past the file filter (CVE-2026-39364, Vite 7.1.0-7.3.2 and 8.x before 8.0.5). They go straight for .env files, AWS creds, Azure tokens and Terraform state. Patch, close port 5173, rotate anything that was reachable 😅