> TritonInfoSec News
Home / Aug 05, 2026 / Story
0
#1 BleepingComputer general August 04, 2026 at 15:24 UTC

Massive ChainDrop npm supply-chain attack infects hundreds of packages

By Bill Toulas

AI Summary

Self-propagating 'ChainDrop' malware has compromised over 1,300 npm packages with a combined 2 billion monthly downloads, representing one of the largest npm supply-chain attacks on record. The malware auto-propagates across the registry, dramatically amplifying its reach and potential impact on Node.js-dependent software pipelines. Security teams should audit npm dependencies immediately and monitor for unexpected package version changes.

Read full article → https://www.bleepingcomputer.com/news/security/mas…

Relevance score: 92.0/100

# More from August 05

  1. 2
    Massive supply-chain attack compromises 440 packages under four hours CyberScoop
  2. 3
    Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks The Hacker News
  3. 4
    New Pass-ta-key attacks let malware hijack Google-synced passkeys BleepingComputer
  4. 5
    Prolific ransomware group behind SonicWall zero-day attacks CyberScoop
  5. 6
    CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises The Hacker News
  6. 7
    Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft says The Record
  7. 8
    OpenAI, Anthropic AI agents targeted real people and systems in cyber tests BleepingComputer
  8. 9
    US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States SecurityWeek
  9. 10
    TP-Link patches Omada ZTP flaws allowing hackers to breach networks BleepingComputer