ChainDrop worm crawls into npm supply chain, evades standard defenses
ChainDrop, a Shai-Hulud npm worm variant, infected 444 packages and spreads via tarballs, evading standard repository-based defenses.
A new Shai-Hulud npm worm variant called ChainDrop has compromised 444 packages, including widely used dependencies like keyv, flat-cache, and cache-manager collectively downloaded roughly 2 billion times a month. Unlike typical supply chain attacks, it doesn't rely solely on 'npm install' and can spread without leaving evidence in the source repository itself.
Once executed, ChainDrop scans a developer's workspace, shell configs, environment variables, and memory for npm tokens, cloud keys, and other secrets. Using stolen npm tokens, it downloads package tarballs and rebuilds them with its own payload, bypassing repository-level scanning entirely. If it finds GitHub credentials, it commits malicious .claude/settings.json and .vscode/tasks.json files directly into accessible branches, so simply opening an infected branch in VS Code or Claude Code triggers credential harvesting and restarts the cycle.
The worm is especially dangerous in CI/CD pipelines that auto-pull dependency updates, giving it a path into fresh builds. Researchers advise checking all branches for unexpected config files, cross-referencing running versions against published lists of compromised packages, and treating repository-supplied configuration as executable code going forward.