Malware

ChainDrop npm worm infects 444 packages

August 15, 2026 1 min read 6 views
cybersecurity news
A new Shai-Hulud variant, ChainDrop, spread via npm tarballs, infecting 444 packages with 2B monthly downloads. It evades source code review and triggers via repo configs.

Was this article helpful?

0 found this helpful

Related Articles

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

1 min read

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

1 min read

Hirudo Android malware replaces banking apps to evade security checks

4 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo