TOPHIT Part 2: Renting the Attack Surface

**Executive summary:** The VHX Harvester operation uses @prime0 npm typosquats to deliver an agent that enumerates vast.ai GPU hosts, scans and fingerprints services, harvests credentials and metadata, injects stored XSS into Caddy auth portals to steal session tokens, rents co-resident containers to scan the Docker bridge, and aims to deploy cryptomining payloads. A misconfigured VHX Harvester panel (69.48.229.140) exposed 17 unauthenticated API endpoints including /agent/code.tar.gz containing full agent source and hardcoded default credentials; the panel enumerated 297 hosts, scanned 13,368 service endpoints, exfiltrated metadata from 416 services, deployed 25 bridge agents and achieved one confirmed root shell. Defenders should audit Caddy auth proxy configurations for the bypass, monitor for containers scanning 172.17.0.0/16, and treat any instance pulling code from 69.48.229.140 as hostile.