09:12
2026-08-09
byteiota.com
ai-tools
ChainDrop Worm Hits 400 npm Packages: Rotate Credentials Now
A self-propagating npm worm called ChainDrop compromised 444 packages, including keyv (600M monthly downloads), flat-cache, and file-entry-cache, on August 4, 2026, spreading in under four hours and e…