New ChainDrop worm poisons over 1,300 npm packages, Keyv and Cacheable among those hit
Aikido researchers uncovers ChainDrop, a Shai‑Hulud variant infecting 1,300+ npm packages with an infostealerAttackers compromised GitHub accounts tied to popular libraries (Keyv, Cacheable, flat‑cache,…
Read more