ChainDrop

1 posts

/chaindrop-npm-worm-keyv/chaindrop-npm-worm-keyv.png
ChainDrop Worm Steals Your Keys the Moment You Run npm Install

August 5, 2026

A worm dumped 1,300 stashes of stolen developer keys into public GitHub repos in a day. You ran npm install. That was all. The poison sat in a library npm hands …