Get the latest tech news

ChainDrop worm crawls into npm supply chain, evades standard defenses


Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks

None

Get the Android app

Or read this on The Register

Read more on:

Photo of ChainDrop

ChainDrop

Photo of npm supply chain

npm supply chain

Photo of ChainDrop worm

ChainDrop worm

Related news:

News photo

Massive ChainDrop npm supply-chain attack infects hundreds of packages