ChainDrop infected 400+ npm packages, according to researchers.
Using Ethereum as a changeable address book let attackers redirect stolen da…
@hacks.gr
@hacks.grChainDrop infected 400+ npm packages, according to researchers.
Using Ethereum as a changeable address book let attackers redirect stolen da…
@threadlinqs.bsky.socialDPRK malware now finds its C2 on the blockchain - one transaction rotates it, no domain to block. https://intel.threadlinqs.com/threat/TL-2026-3023 #ThreatIntel #ChainDrop #PolinRider #NullReceiver
@threadlinqs.bsky.socialA hijacked keyv maintainer shipped a npm worm with valid SLSA provenance - and it republishes itself. https://intel.threadlinqs.com/threat/TL-2026-2822 #ThreatIntel #ChainDrop #ShaiHulud #Bun
