Back to news
ChainDrop worm crawls into npm supply chain, evades standard defenses

ChainDrop worm crawls into npm supply chain, evades standard defenses

The Register

Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks