JavaScript security

Critical npm Supply Chain Attack Infects 1,300+ Packages with Credential-Stealing Worm

A new Shai-Hulud malware variant, ChainDrop, compromises over 1,300 npm packages, stealing developer and cloud credentials. Learn how it works and how to respond.