Stardrop Supply Chain Attack Targets Venture Capital Firms, Luxury Brands, and AI Companies

A sophisticated supply chain attack dubbed "Stardrop" is targeting AI companies, luxury brands, and venture capital firms by distributing over 200 malicious NPM packages that masquerade as an AI coding tool but actually deploy multi-platform infostealer malware designed to harvest cloud and API credentials.