Qore.com on MSN

ChainDrop contaminó 435 paquetes y 1,557 versiones de npm

ChainDrop contaminó 435 paquetes y 1,557 versiones; robó credenciales pese a publicar con atestaciones SLSA válidas.
Microsoft

ChainDrop supply chain compromise: Anatomy of a self-propagating worm

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...