A worm tore through npm by making the malware look perfectly legitimate
AI-summarised brief · reviewed before publication
A self‑spreading worm dubbed “ChainDrop” compromised the npm registry on Tuesday, injecting malicious code into hundreds of packages that collectively account for billions of monthly downloads. The attack began with the hijacking of the GitHub account of the maintainer of the popular caching library keyv, which is fetched roughly 150 million times weekly. Using the compromised account, the attacker pushed poisoned commits to the projects’ main branches, allowing each package’s automated release pipeline to publish malicious versions that carried valid GitHub Actions provenance. The worm added pre‑install hooks that executed a dropper, which fetched the Bun runtime and stole a wide range of credentials—including npm, GitHub, AWS, Kubernetes, Vault, SSH keys, and AI‑tool tokens. It then used stolen npm tokens to republish trojanized packages, creating a self‑propagating loop. Command‑and‑control is resolved via an Ethereum smart contract, and persistence hooks are embedded in AI coding tools such as Claude Code and VS Code, enabling re‑execution simply by opening an infected repository.
💡 Why It Matters
- · By exploiting trusted build provenance, the worm bypasses typical security checks and can silently hijack the supply chain of countless downstream projects, turning the open‑source ecosystem into a rapid distribution channel for credential theft.
