Tag: ChainDrop

Self-propagating npm worm poisons 400-plus packages via stolen tokens

The Mini Shai-Hulud worm stole publisher credentials, republished tainted packages, and burrowed into AI coding tools.