Malware

ChainDrop npm attack compromises 1,300+ packages

August 04, 2026 1 min read 5 views
cybersecurity malware news
A self-propagating worm named ChainDrop has infected over 1,300 npm packages, including popular caching libraries, via a compromised maintainer's GitHub account. The malware steals credentials and spreads through CI/CD pipelines.

Was this article helpful?

0 found this helpful

Related Articles

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

1 min read

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

1 min read

Hirudo Android malware replaces banking apps to evade security checks

4 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo