{
  "id": 1016564,
  "title": "ChainDrop worm crawls into npm supply chain, evades standard defenses",
  "url": "https://urgent.news/2026/08/15/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-15T10:31:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/08/15/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses/5287958"
  },
  "original_language": "en",
  "account": "A new strain of the Shai-Hulud npm worm, known as ChainDrop, infiltrated hundreds of packages while employing sophisticated techniques to evade standard defenses. This iteration, named after the sandworms from Frank Herbert's Dune, poses a significant threat to the npm community. Unlike previous versions, ChainDrop can bypass traditional security measures, making it particularly dangerous. Microsoft and others have dubbed this latest variant ChainDrop.\n\nIdentified in August, ChainDrop has already infected 444 packages from multiple publishers, which are collectively downloaded around 2 billion times monthly. These packages, including key dependencies like keyv, flat-cache, and cache-manager, typically don't require installation to be compromised. ChainDrop works by placing startup hooks into repository configuration files and can activate upon opening an infected Git branch in VS Code or Claude Code.\n\nChainDrop spreads through tarballs, not by altering the repository source code. Once executed, it searches for npm tokens with full write privileges and other credentials such as cloud keys and secrets. Prolific sources of this data include shell configurations, environment variables, and even live memory. Any stolen data is encrypted and sent back to attacker-controlled endpoints. If ChainDrop finds an npm token, it downloads all packages that token can access, effectively self-replicating. This attack also targets GitHub credentials, querying the GitHub API to list accessible repositories and branches, and committing malicious configuration code directly into those branches.\n\nThis attack is particularly insidious due to npm's integration into automated CI/CD pipelines, allowing the worm to slip into fresh builds during dependency updates. If infected, developers should look for .claude/settings.json and .vscode/tasks.json files they did not add, as well as all other branches of the repository. The compromised packages have been removed from npm. To prevent future breaches, developers and security teams should consider reevaluating their systems, especially how they treat repository-supplied configuration as executable content.",
  "summary": "Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "ChainDrop worm crawls into npm supply chain, evades standard defenses",
        "url": "https://urgent.news/2026/08/15/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses-1018593",
        "published": "2026-08-15T10:31:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}