AIThe Registerabout 1 hour ago
ChainDrop worm poisons 444 npm packages
4 min read
ChainDrop, a Shai-Hulud variant, infected 444 npm packages downloaded about 2 billion times monthly. It spreads via tarballs and dev-tool hooks, bypassing source code review. Targets include keyv, flat-cache, and cache-manager. Infected packages were yanked from npm.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
