A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation
Microsoft's security research team tracked a campaign called 'ChainDrop' that took over an npm maintainer account and published trojanized releases across more than 400 packages, harvesting credential…