CHAINDROP SUPPLY CHAIN COMPROMISE: ANATOMY OF A SELF-PROPAGATING WORM

Summary from the TLDR IT newsletter

Microsoft identified a self-propagating supply chain attack affecting more than 400 npm packages. The malware steals npm, GitHub, AWS, Kubernetes, and HashiCorp Vault credentials from developer machines and CI systems, then uses stolen publishing tokens to infect and republish additional packages automatically.