În afara temei aiqbench
Această știre a fost preluată de la o sursă pe care o urmărim, dar nu ține de domeniul AI sau cuantic, așa că nu există o perspectivă aiqbench pentru ea.
Shai-Hulud CHAINDROP Worm Backdoors 400+ npm Packages With 1.3 Billion Monthly Downloads

Shai-Hulud is back in the npm ecosystem, and this time its reach is unusually broad. A new self-propagating malware strain called CHAINDROP has backdoored more than 400 packages after attackers compromised the maintainer of the widely used keyv library. The campaign turns trusted software updates into a route for stealing developer credentials and spreading further. […] The post Shai-Hulud CHAINDROP Worm Backdoors 400+ npm Packages With 1.3 Billion Monthly Downloads appeared first on Cyber Security News.
Shai-Hulud is back in the npm ecosystem, and this time its reach is unusually broad. A new self-propagating malware strain called CHAINDROP has backdoored more than 400 packages after attackers compromised the maintainer of the widely used keyv library. The campaign turns trusted software updates into a route for stealing developer credentials and spreading further. It can run before installation is complete, then use captured npm access tokens to publish altered versions of every package…
Extras afișat conform termenilor RSS ai publicației · 75 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe

Red Hat hit by npm supply‑chain attack - here's how to stay safe
ZDNet · 3 iun. 2026

Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets
Cybersecurity News · 8 oct. 2026

Security briefing: August 2026
Sysdig Blog · 1 sept. 2026

Popular npm Package With 150K+ Weekly Downloads Hit by Credential-Stealing Supply-Chain Worm
Cybersecurity News · 31 aug. 2026