Tracking Shai-Hulud: Inside the ChainDrop NPM Worm

Reported 12 Aug 2026 by otx · Severity: medium

On August 4, 2026, ChainDrop, a self-propagating worm variant of Mini Shai-Hulud linked to TeamPCP, infiltrated the npm ecosystem through a compromised maintainer account of the keyv ecosystem. The attacker injected malicious code into GitHub repositories, weaponizing legitimate