ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate...
ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages
1. Basic Information
Article Title: Keyv and friends compromised in active Shai-Hulud supply chain attack
Publisher: Aikido Security
Publication Date: August 4, 2026
ChainDrop: the npm worm that faked being legitimate
Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack
Massive ChainDrop npm supply-chain attack infects hundreds of packages
The Shai-Hulud npm worm didn't fake its security check — it earned a legitimate one
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
A self-spreading worm poisoned hundreds of npm packages in hours, slipped past provenance checks, hid its controls on Ethereum,…
More than 400 NPM packages have been infected with the Mini Shai-Hulud worm in the ChainDrop supply chain attack.
Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly…
Keyv Supply Chain Attack: What You Need to Know Now - Complete guide and honest review for 2026.
Plus three other stealers in three other packages, all from the same scumbag
A hijacked GitHub account let the Shai-Hulud worm pass npm's trust check, spreading through packages with 2 billion monthly…
