ChainDrop: Inside a Self-Propagating npm Worm

The ChainDrop npm worm is a highly sophisticated, self-propagating supply chain attack that infected hundreds of popular packages, stealthily harvesting sensitive credentials and spreading across developer workstations, CI pipelines, and cloud environments while dynamically controlling its infrastructure via blockchain, making detection and containment especially challenging.