Massive ChainDrop npm supply-chain attack infects hundreds of packages

BleepingComputer by Bill Toulas 4 August 2026, 18:24 EEST Security

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.

Read the full story on BleepingComputer https://www.bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Unpatched Calix flaw lets hackers bypass NAT to expose internal devices BleepingComputer
Hackers target WordPress sites in miniOrange auth bypass attacks BleepingComputer
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning The Hacker News
ReliaQuest confirms failed data-theft attack after ShinyHunters breach BleepingComputer