ChainDrop hijacked 444 npm packages and 2B monthly downloads via a Claude Code hook. AI agents have collapsed the gap between credential theft and abuse
First seen on securityboulevard.com
Jump to article: securityboulevard.com/2026/08/machine-speed-credential-abuse-what-the-chaindrop-npm-worm-changes/
![]()

