Shai-Hulud strikes again: CHAINDROP worm hits 400+ npm packages

A highly sophisticated supply chain attack leveraging the CHAINDROP worm has compromised over 400 npm packages—including those with more than a billion monthly downloads—by exploiting stolen credentials to propagate credential-stealing malware across developer ecosystems.