[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fx3SNnU2GFcvzORVuBLgy1hSf5TuzYXtIurT_461BYY4":3},{"article":4,"iocs":53,"watch_terms":57,"solutions":58,"lesson":159},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"48c3fd36-1315-49fd-821b-6bea4a280d7a","ChainDrop supply chain compromise: Anatomy of a self-propagating worm","chaindrop-supply-chain-compromise-anatomy-of-a-self-propagating-worm-7e48a2","A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems by republishing malicious updates. This analysis details the attack chain, affected environments, and practical guidance for detection, hunting, and remediation. The post ChainDrop supply chain compromise: Anatomy of a self-propagating worm appeared first on Microsoft Security Blog.","A sophisticated supply chain attack, dubbed ChainDrop, has compromised over 400 npm packages, embedding a credential-stealing worm. This worm, a variant of Mini Shai-Hulud, uses a Bun-based JavaScript payload executed via npm's preinstall lifecycle hook to steal credentials from developer workstations and CI\u002FCD environments. The malware then uses these stolen credentials to authenticate to various services like npm, GitHub, and AWS, enabling it to enumerate sensitive data and, critically, to republish compromised packages with the malware embedded, thus self-propagating across the software ecosystem.","Credential-stealing worm in 400+ npm packages self-propagates by republishing malicious updates.","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2026\u002F08\u002F04\u002Fchaindrop-supply-chain-compromise-anatomy-self-propagating-worm\u002F","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002Fwp-content\u002Fuploads\u002F2026\u002F05\u002FMS_Actional-Insights_Links.jpg","2026-08-04T23:46:41+00:00","2026-08-05T02:00:25.34528+00:00",9,[17,20,22,24,26,28],{"name":18,"type":19},"npm","product",{"name":21,"type":19},"keyv",{"name":23,"type":19},"flat-cache",{"name":25,"type":19},"cache-manager",{"name":27,"type":19},"Bun",{"name":29,"type":19},"GitHub Actions","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":30,"icon":32,"name":33,"slug":34},null,"Supply Chain","supply-chain",[36,38,43,48],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54],{"type":42,"value":55,"context":56},"Mini Shai-Hulud","Variant of the credential-stealing worm found in npm packages.",[18,21,23],{"controls":59,"vendors":147},[60,89,118],{"slug":61,"name":62,"problem":63,"products":64},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"slug":90,"name":91,"problem":92,"products":93},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[94,102,110],{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"slug":119,"name":120,"problem":121,"products":122},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[123,131,139],{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":140,"vendor_name":141,"vendor_logo":142,"product_slug":143,"product_name":144,"url":145,"description":146},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",[148,151,156],{"slug":74,"name":75,"logo_path":76,"roles":149},[150],"affected",{"slug":152,"name":153,"logo_path":154,"roles":155},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png",[150],{"slug":111,"name":112,"logo_path":113,"roles":157},[158],"reported_by",{"slug":160,"title":161,"body":162,"framework_refs":163,"framework_notes":175},"chaindrop-self-propagating-worm-hijacks-400-npm-packages-via-stolen-credentials","ChainDrop: Self-Propagating Worm Hijacks 400+ npm Packages via Stolen Credentials","The ChainDrop attack exploited npm's preinstall lifecycle hook to silently execute malicious JavaScript during routine package installations, targeting developer workstations and CI\u002FCD pipelines. Once credentials for npm, GitHub, and AWS were harvested, the worm autonomously republished infected versions of legitimate packages, creating a self-sustaining propagation loop across the open-source ecosystem. This attack is particularly dangerous because developers and automated pipelines implicitly trust packages from well-known registries, meaning a single compromised dependency can cascade into hundreds of downstream victims. The use of long-lived, overly permissive credentials stored in developer environments amplified the blast radius significantly. This incident underscores that supply chain integrity is only as strong as the least-secured credential in the development pipeline.",[164,165,166,167,168,169,170,171,172,173,174],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 6: Access Control Management","CIS Control 16: Application Software Security","NIST SP 800-161: Cybersecurity Supply Chain Risk Management","NIST SP 800-218: Secure Software Development Framework (SSDF) PW.4, RV.1","NIST AC-6: Least Privilege","NIST SI-3: Malicious Code Protection","NIST SR-11: Component Authenticity","SLSA Supply Chain Levels for Software Artifacts (Level 3+): Build Integrity","OWASP A06:2021 – Vulnerable and Outdated Components","GDPR Article 32: Security of Processing (for EU-regulated organizations handling personal data in affected pipelines)",{}]