TECH NEWS
New ChainDrop worm poisons over 1,300 npm packages, Keyv and Cacheable among those hit
* Aikido researchers uncovers ChainDrop, a Shai‑Hulud variant infecting 1,300+ npm packages with an infostealer * Attackers compromised GitHub accounts tied to popular libraries (Keyv, Cacheable, flat‑cache, file‑entry‑cache) and pushed tainted releases with 2B monthly downloads * Malware exfiltrates developer/cloud credentials and secrets to a public GitHub