THREAT OPS › Threat News › ChainDrop: Inside a Self-Propagating npm Worm
ChainDrop: Inside a Self-Propagating npm Worm
<p>Analysis of ChainDrop, an npm supply chain worm extracting GitHub Actions runner secrets and using Ethereum smart contracts for C2 routing.</p> <p>The post <a href="https://unit42.paloaltonetworks.com/chaindrop-npm-worm-analysis/">ChainDrop: Inside a Self-Propagating npm Worm</a> appeared first on <a href="https://unit42.paloaltonetworks.com">Unit 42</a>.</p>
Original source: https://unit42.paloaltonetworks.com/chaindrop-npm-worm-analysis/
Same event, other sources
- ChainDrop supply chain compromise: Anatomy of a self-propagating wormmsstic · 2026-08-04