A worm tore through npm by making the malware look perfectly legitimate
A self-spreading worm tore through npm on Tuesday. It poisoned hundreds of packages that huge swathes of the software world quietly rely on. Researchers named it ChainDrop. It is a bigger, meaner descendant of the smaller Shai-Hulud attack that hit the registry earlier this summer. It began by hijacking the GitHub account of the developer […]
This story continues at The Next Web
A worm tore through npm by making the malware look perfectly legitimate Read More »