Entity coverage

npm

Every NG Tech LLC signal, daily brief, and feature tied to npm, grouped by publish date.

All insights Jump to archive

1 published item.

Coverage grouped by day

Every published piece for npm, newest first.

# Aug 4, 2026

1 item

Signal 2 sources

ChainDrop npm worm poisons 444 packages in hours and persists via Claude Code and…

On August 4, 2026 a self-propagating npm worm dubbed ChainDrop compromised 444 packages and 2,212 versions in under four hours, beginning with keyv@6.0.0 after a maintainer accoun…

Read article