URL has been copied successfully!
Massive ChainDrop npm supply-chain attack infects hundreds of packages
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

Massive ChainDrop npm supply-chain attack infects hundreds of packages


Tags: , ,

Self-propagating malware named ‘ChainDrop’ has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.

First seen on bleepingcomputer.com

Jump to article: www.bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. Worm flooding npm registry with token stealers still isn’t under control
  2. Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware
  3. SAP npm Packages Compromised by “Mini Shai-Hulud” Credential-Stealing Malware
  4. Shai-Hulud Hades Payload Hits 20 Leo/RStreams npm Packages in Fresh Supply Chain Attack