TI Mindmap HUB
Threat Intelligence Report

Tracking Shai-Hulud: Inside the ChainDrop NPM Worm

📅 August 12, 2026 📰 www.zscaler.com 🔍 0 CVE(s) referenced

ChainDrop, a sophisticated npm worm leveraging trusted build infrastructure and Ethereum smart contracts, rapidly spread across over 400 packages by stealing developer credentials, evading detection, and punishing incident response with destructive payloads—proving that provenance and signed releases alone cannot secure the software supply chain.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle