New ChainDrop worm poisons over 1,300 npm packages, Keyv and Cacheable among those hit
05/08/2026-14:05 05/08/2026-14:10 מחשבים וטכנולוגיה TechRadar דיווח
Aikido researchers uncovers ChainDrop, a Shai‑Hulud variant infecting 1,300+ npm packages with an infostealerAttackers compromised GitHub accounts tied to popular libraries (Keyv, Cacheable, flat‑cache, file‑entry‑cache) and pushed tainted releases w