--- title: Another NPM worm | daily.dev description: A new self-propagating worm called ChainDrop is spreading through the npm ecosystem by exploiting compromised npm packager credentials. StepSecurity reports... canonical: https://daily.dev/posts/another-npm-worm-ne2grl9t7 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Another NPM worm | daily.dev og:description: A new self-propagating worm called ChainDrop is spreading through the npm ecosystem by exploiting compromised npm packager credentials. StepSecurity reports... og:url: https://daily.dev/posts/another-npm-worm-ne2grl9t7 og:image: https://api.daily.dev/og/posts/ne2gRl9t7.png og:image:alt: Another NPM worm og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Another NPM worm **[LWN.net](https://daily.dev/sources/lwn)** · 1 min read · 0 upvotes · 0 comments ## Summary A new self-propagating worm called ChainDrop is spreading through the npm ecosystem by exploiting compromised npm packager credentials. StepSecurity reports that 435 packages and over 1,550 compromised versions have already been flagged, starting with keyv@6.0.0. The worm's design is not novel, but the speed of exploitation is notable. Users of affected packages should assume their environments are compromised. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Massive ChainDrop npm supply-chain attack infects hundreds of packages](https://daily.dev/posts/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages-uhzbslfdu) · BleepingComputer · 3 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#javascript](https://daily.dev/tags/javascript), [#malware](https://daily.dev/tags/malware), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/another-npm-worm-ne2grl9t7) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Another NPM worm","url":"https://daily.dev/posts/another-npm-worm-ne2grl9t7","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/another-npm-worm-ne2grl9t7"},"datePublished":"2026-08-04T14:59:11.518Z","dateModified":"2026-08-05T02:09:06.407Z","description":"A new self-propagating worm called ChainDrop is spreading through the npm ecosystem by exploiting compromised npm packager credentials. StepSecurity reports...","image":"https://media.daily.dev/image/upload/s--58gMhC4P--/f_auto/v1722860399/public/Placeholder%2012","thumbnailUrl":"https://media.daily.dev/image/upload/s--58gMhC4P--/f_auto/v1722860399/public/Placeholder%2012","isAccessibleForFree":true,"articleSection":"LWN.net","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"LWN.net","logo":"https://media.daily.dev/image/upload/s--4jjE7GIK--/f_auto,q_auto/v1774960833/logos/lwn?_a=BAMAMiWQ0","url":"https://daily.dev/sources/lwn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/another-npm-worm-ne2grl9t7","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,javascript,malware,npm","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"LWN.net","item":"https://daily.dev/sources/lwn"},{"@type":"ListItem","position":3,"name":"Another NPM worm"}]} ```