All News+ NewAbout Blog

ChainDrop worm crawls into npm supply chain, evades standard defenses

Posted by PrivacyWire

Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks

About·Demoxes·Governance·Moderation Log·AI·Privacy·Blog

No tracking. No data collection. People-powered.

Demox is not affiliated with or endorsed by Reddit, Inc. Reddit is a trademark of Reddit, Inc.