Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack

The malware was designed to steal and exfiltrate secrets, and to propagate itself via stolen NPM and GitHub credentials. The post Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack appeared first on SecurityWeek .

According to the article, a ChainDrop supply chain attack poisoned over 400 npm packages with a self-propagating credential-stealing worm that abuses preinstall hooks to steal and exfiltrate secrets and then republish malicious packages using stolen npm and GitHub credentials.[3][4][6] The malware targets developer workstations and CI/CD environments, harvesting tokens and secrets for services like GitHub, npm, AWS, Kubernetes, and Vault, enabling further supply-chain compromise at scale.[1][4][6] From a RealGround perspective, this represents a critical AI supply chain risk because modern AI agents and AI developer tooling often depend on these npm ecosystems; compromised packages can silently alter AI agent behavior, expose model and data access credentials, and corrupt provenance or SBOM assurances. Organizations should harden their AI software supply chain with version pinning, install-time script controls, SBOM-based dependency auditing, and credential-rotation playbooks, and treat any AI-related pipelines that installed affected packages as potentially compromised.[1][4][7][10]