AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

ChainDrop credential stealing worm infects over 400 npm packages

criticalnewsLLM-Specific

security

Source: CSO OnlineAugust 4, 2026

Summary

ChainDrop is a self-propagating malware attack that infected 444 npm packages (software libraries used by developers) with over 2 billion monthly downloads combined, starting with a compromised GitHub account belonging to a popular package maintainer. The malware steals credentials, configuration files, and secrets from developers' machines, including AI assistant credentials and cloud access tokens, and uses the Ethereum blockchain for command and control (a technique called EtherHiding). This is a new variant of Shai-Hulud, a supply-chain worm (malware that spreads through software dependencies) that has targeted code repositories since last year.

Solution / Mitigation

Enterprise security teams must perform full audits of developer machines, since the compromised packages are transitive dependencies (indirect dependencies pulled in by other packages) for thousands of others and any poisoned versions installed during the attack window means all possible credentials accessible on that machine or other machines accessible from it are at risk.