Des chercheurs affirment que ChainDrop, un ver basé sur Shai-Hulud, a compromis plus de 1 300 paquets npm, dont Keyv, Cacheable et flat-cache, totalisant 2 milliards de téléchargements mensuels
Lire l’article original sur BleepingComputer →
Un logiciel malveillant autoréplicatif baptisé « ChainDrop » a compromis plus de 1 300 paquets, totalisant 2 milliards de téléchargements mensuels sur le registre Node Package Manager (npm).
Researchers: ChainDrop, a Shai-Hulud-based worm, has compromised 1,300+ npm packages, like Keyv, Cacheable, and flat-cache, with a combined 2B monthly downloads
Self-propagating malware named ‘ChainDrop’ has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.