Skip to content

ChainDrop npm worm

Named by 2 kept items in this workspace.

Search every workspace for ChainDrop npm worm. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Evolution of Web3 in Cloud Supply Chain Attacks
    article2026-10-07It is written here as ChainDrop npm worm (Shai-Hulud family; infected over 400 npm packages, including keyv and cacheable-request).

    Shai-Hulud family; infected over 400 npm packages, including keyv and cacheable-request

  • Claude Code & Gemini CLI: GitHub Issue → CI Secrets
    writeup2026-09-01

    npm worm whose operators planted a Claude Code SessionStart hook and a VS Code folderOpen task in compromised repositories, firing when a developer opened the workspace rather than waiting for an install; reported by Pillar Security on August 4

All threat actors in this workspace.