cacheable-request, npm and keyv: ChainDrop Turns Stolen npm Tokens Into an Automated Package-Infection Engine
public
–
3 min read
New npm Supply-Chain Worm "ChainDrop" Automates Package Infections at Scale
A recently discovered npm supply-chain worm, dubbed ChainDrop,…