yoteki

ChainDrop worm infects 444 npm packages in supply chain attack

The Register · first seen 15.08.2026

A Shai-Hulud variant named ChainDrop has poisoned 444 packages in the npm supply chain, evading standard defenses via tarballs and dev-tool hooks.

  • ChainDrop worm variant poisoned 444 packages
  • The malware spreads via tarballs and dev-tool hooks while evading standard defenses

Sources

Also in the feed that day