Massive ChainDrop npm supply-chain attack infects hundreds of packages BleepingComputerkeyv and cacheable npm Package Hijacked in Supply Chain Attack wiz.ioChainDrop npm Worm: Bun-loaded CI/CD credential harvester with Ethereum dead-drop C2 Step SecurityInside the keyv npm Supply Chain Compromise SnykKeyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks The Hacker News
Market News