Massive ChainDrop npm supply-chain attack infects hundreds of packages

BleepingComputer by Bill Toulas 4 August 2026, 18:24 EEST Security

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.

Read the full story on BleepingComputer https://www.bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

CISA: Medusa ransomware hit over 500 critical infrastructure orgs BleepingComputer
Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps The Hacker News
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets The Hacker News
Clop created custom web shell for Windchill data theft attacks BleepingComputer