[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnMr8UUbT7T4F12th4EMkeAR7220mfTl2zg-jgFrqgEA":3},{"article":4,"iocs":54},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":31,"category":32,"article_tags":36},"4c4b9cba-0f73-4735-94f5-6a553f0795a4","Massive ChainDrop npm supply-chain attack infects hundreds of packages","massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages-dabae7","Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry. [...]","A sophisticated supply-chain attack, dubbed 'ChainDrop', has compromised over 1,300 npm packages, impacting those with a combined 2 billion monthly downloads. The malware, a Shai-Hulud-based worm, spreads by compromising maintainer GitHub accounts and pushing malicious code directly to main branches, then publishing new releases. It steals developer and cloud credentials, including GitHub PATs, AWS credentials, and Kubernetes secrets, exfiltrating them to a public GitHub repository or the 'npm-cache[.]com' domain.","ChainDrop malware infects over 1,300 npm packages, stealing developer and cloud credentials.","Massive ChainDrop npm supply-chain attack infects hundreds of packages By Bill Toulas August 4, 2026 11:24 AM 0 Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry. Infected packages include very popular ones such as Keyv and Cacheable, flat-cache and file-entry-cache, all caching utilities from the same maintainer. The supply-chain attack started after the threat actor compromised the GitHub account of Keyv’s maintainer, and quickly spread to packages associated with major organizations such as Deliveroo, Ornikar, OneReach, Picsart, Qlik, and ServiceTitan. Multiple application security companies spotted the attack and discovered that it deployed a Shai-Hulud-based worm named ChainDrop. A report from Aikido says \"at least 868 packages (across 1381 versions) have been compromised by the worm.\" The researchers say that the attacker pushed malicious files directly to the projects’ main branches and then generated new package releases. Because the packages were built and published through their legitimate GitHub Actions workflows, the compromised npm releases carried valid provenance information. The poisoned packages contain two files: the setup.mjs payload dropper and the Math_Symbol.js script for stealing sensitive information, as well as a \"preinstall\": \"node setup.mjs\" entry in their package.json configuration file. \"Anyone who ran npm install against an affected version would have had setup.mjs execute automatically before their install completed,\" Aikido researchers warn. The setup.mjs dropper downloads the Bun JavaScript runtime from the official GitHub release to execute Math_Symbol.js, the malicious payload with infostealing capabilities. execFileSync(\u003Cbun binary>, ['\u003Cscript_dir>\u002FMath_Symbol.js'], { stdio: 'inherit', cwd: \u003Cscript_dir> }) After downloading the Bun executable to run the infostealer script, setup.mjs deletes the temporary runtime directory. Aikido notes that the infostealer collects developer and cloud credentials from the compromised environment and encrypts them before sending them to a public GitHub repository with the description \"Shai-Hulud: Here We Go Again.\" The malicious JavaScript is heavily obfuscated and includes self-spreading capabilities that allow it to infect packages from other maintainers that used a previously compromised package. While Aikido found that the Bun executable launched the Math_Symbol.js script, BleepingComputer has also seen compromised npm packages containing the math_init.js script. Obfuscated math_init.js \u002F Math_Symbol.js scriptsource: BleepingComputer Every token is first validated in real-time against registry.npmjs[.]org\u002F-\u002Fwhoami before being stolen. The malware searches infected development systems and CI\u002FCD runners for credentials that could grant it access to additional source code repositories and npm packages, and collects the following types of data: The complete process environment. Local configuration and credential files. GitHub PATs, workflow tokens, and other ghp_, gho_, and ghs_ tokens. npm tokens beginning with npm_. GitHub Actions secrets, including code designed to extract \"isSecret\":true values from a self-hosted runner. AWS credentials, SSM Parameter Store values using WithDecryption: true, and Secrets Manager secrets. Kubernetes secrets from accessible namespaces. HashiCorp Vault tokens and KV secrets. Database credentials, private keys, Stripe, Slack, Twilio, Azure, and GCP credentials. According to cloud security company Wiz, the ‘npm-cache[.]com’ domain is also being used for exfiltrating data and should be treated as a strong indicator of compromise. If an affected package version was installed, system administrators should treat the developer workstation or CI\u002FCD runner as compromised even if the package was subsequently removed. In such instances, it is recommended to rebuild systems from safe backups or from scratch, rotate all tokens that were accessible from the impacted environment, and review logs for unauthorized access and repositories for unexpected commits or changes. As the attack is still unfolding, the number of packages and exact malicious versions is expected to grow, so it is important to continue using dependency allowlisting, integrity checks, and provenance controls. A list of compromised npm packages is available from Wiz, StepSecurity, Aikido, Socket, and Ox Security. The security companies also provide a list of indicators of compromise that include hashes for malicious files and artifacts, and network data. Test every layer before attackers do Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection. Get the whitepaper Related Articles: New IronWorm malware hits 36 packages in npm supply-chain attackAmazon links Debug, Chalk NPM supply-chain attacks to North Korean hackersAsyncAPI npm packages infected with credential-stealing malwareHackers backdoor Jscrambler npm package with infostealer malwareInjective SDK on npm infected with cryptocurrency wallet stealer","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fmassive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F05\u002F18\u002FNPM-worms.jpg","2026-08-04T15:24:35+00:00","2026-08-04T16:00:24.807563+00:00",9,[18,21,23,25,28],{"name":19,"type":20},"npm","technology",{"name":22,"type":20},"Node Package Manager",{"name":24,"type":20},"JavaScript",{"name":26,"type":27},"Bun","product",{"name":29,"type":30},"Shai-Hulud","threat_actor","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":31,"icon":33,"name":34,"slug":35},null,"Supply Chain","supply-chain",[37,39,44,49],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,59],{"type":56,"value":57,"context":58},"domain","npm-cache[.]com","Data exfiltration domain",{"type":60,"value":61,"context":62},"url","https:\u002F\u002Fgithub.com\u002FShai-Hulud\u002FShai-Hulud","Public GitHub repository used for exfiltration"]