HomeAI · summaries
Storia in 6 fonti
ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages
ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate...
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
thehackernews.com
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
A Keyv-linked npm worm poisoned 353 versions across 79 package names, stealing developer and CI credentials while repository hooks remained present.
- ·
bleepingcomputer.com
Massive ChainDrop npm supply-chain attack infects hundreds of packages
Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.
