Attackers gained control of a GitHub maintainer account managing several widely used Node.js packages (keyv, cacheable, flat-cache, file-entry-cache) with over a billion monthly downloads. They pushed malicious code directly to the main branch, which was automatically published to npm with valid signatures, bypassing typical trust mechanisms. The malicious preinstall script downloads a Bun runtime to run an obfuscated payload that harvests sensitive credentials from multiple platforms including npm, GitHub, AWS, Kubernetes, and Vault. It also scans for SSH keys and environment files to maximize credential theft. Exfiltrated data is sent to attacker-controlled GitHub repositories and Ethereum smart contracts. Using stolen npm tokens, the worm autonomously infects other packages, enabling self-propagation. This campaign, named ChainDrop, continues the Shai Hulud malware family’s supply chain attacks targeting open-source ecosystems.

This supply chain malware compromises trusted npm packages, potentially affecting any users or systems that install or update these packages. Credential harvesting from multiple cloud and development platforms can lead to broader compromise of developer environments and cloud infrastructure. The autonomous self-propagation using stolen npm tokens increases the risk of widespread infection across the npm ecosystem. Data exfiltration to attacker-controlled repositories and smart contracts indicates potential for ongoing attacker control and monetization. No known exploits in the wild are reported yet, but the scale and automation of the attack pose a significant medium-level threat to the Node.js supply chain.

No official patch or remediation is currently documented. Users and maintainers of affected packages should audit package integrity and GitHub account security. Revoke and rotate any exposed credentials and npm tokens. Monitor for suspicious package updates or preinstall scripts. Consider temporarily avoiding or locking dependencies on the affected packages until further vendor or maintainer advisories are available. Follow updates from package maintainers and security researchers for official fixes or mitigations.