~/article/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages-12xbob

info2026-08-04 15:24 UTCSource: BleepingComputer

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Topics

supply-chain malware

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

~/related/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages-12xbob

2026-10-05 21:25 UTC[info]

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

Dark Readingmalware iot linux

2026-10-05 15:30 UTC[high]

University of Illinois Chicago affected by ransomware attack on medical school

The Recordransomware malware

2026-10-05 13:30 UTC[low]

Malwarebytes Scam Link Check analyzes URLs and explains potential risks

Help Net Securityphishing malware

2026-10-05 13:01 UTC[info]

Alleged dev of Ploutus ATM malware appears in US court after arrest

BleepingComputermalware

2026-10-05 13:00 UTC[info]

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

SecurityWeekmalware linux

2026-10-05 11:46 UTC[high]

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

The Hacker Newsmalware