Wormable npm Malware Crawls the Supply Chain

Apr 25, 2026 · 1:40

A wormable npm malware variant used a stolen token to self-propagate across packages and multiple distribution platforms including Docker Hub and GitHub Ac…