--- title: ChainDrop hits 444 npm packages, Cloudflare agent... description: A new npm worm called ChainDrop has poisoned 444 packages and is evading standard supply-chain defenses — bad timing given npm 12's new opt-in defaults are... canonical: https://daily.dev/posts/chaindrop-hits-444-npm-packages-cloudflare-agent-tracing-goes-paid-in-october-ksmhvkyyc twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: ChainDrop hits 444 npm packages, Cloudflare agent tracing goes paid in October | daily.dev og:description: A new npm worm called ChainDrop has poisoned 444 packages and is evading standard supply-chain defenses — bad timing given npm 12's new opt-in defaults are... og:url: https://daily.dev/posts/chaindrop-hits-444-npm-packages-cloudflare-agent-tracing-goes-paid-in-october-ksmhvkyyc og:image: https://api.daily.dev/og/posts/KSmhvKyYC.png og:image:alt: ChainDrop hits 444 npm packages, Cloudflare agent tracing goes paid in October og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # ChainDrop hits 444 npm packages, Cloudflare agent tracing goes paid in October **[Backend Digest](https://daily.dev/sources/backend_digest)** · 4 min read · 1 upvotes · 0 comments ## Summary A new npm worm called ChainDrop has poisoned 444 packages and is evading standard supply-chain defenses — bad timing given npm 12's new opt-in defaults are still rolling out. Cloudflare launched agent tracing for Workers, but payload defaults are inconsistent across frameworks and the free tier ends October 1. Node.js Interactive 2026 surfaced two supply-chain incidents and a shift to one major release per year. On the backend fundamentals side, a two-year gRPC-vs-REST retrospective lands with a clear verdict: gRPC's operational cost is real and most teams underestimate it. ## Content **TLDR:** A new npm worm called ChainDrop has poisoned 444 packages and is evading standard supply-chain defenses — bad timing given npm 12's new opt-in defaults are still rolling out. Cloudflare launched agent tracing for Workers, but payload defaults are inconsistent across frameworks and the free tier ends October 1. Node.js Interactive 2026 surfaced two supply-chain incidents and a shift to one major release per year. On the backend fundamentals side, a two-year gRPC-vs-REST retrospective lands with a clear verdict: gRPC's operational cost is real and most teams underestimate it. --- ## ChainDrop worm infects 444 npm packages, evades standard defenses A variant of the Shai-Hulud malware family is spreading through npm by poisoning tarballs and hooking into developer tooling. 444 packages confirmed infected so far, and the worm is reportedly bypassing the security controls most teams rely on for supply-chain detection. This lands right after npm 12 flipped install scripts and remote tarballs to opt-in — if you haven't audited your dependency tree recently, now's the time. Node.js Interactive 2026 also called out both Shai-Hulud and the Axios compromise as the headline security incidents of the cycle. [Read more](https://daily.dev/feed-by-ids?id=voBYSe76t&id=4X26F7SFK&id=TGG3vj4uh) ## Cloudflare agent tracing launches with inconsistent payload defaults and an October billing cliff Cloudflare's new agent tracing covers spans for model calls, tool execution, and approvals, with turn-by-turn session replay. The catch: payload recording defaults differ by framework — Think and wrapAISDK() require explicit opt-in, while Flue stores payloads by default, creating privacy inconsistencies that can leak secrets. Tracing is free during beta, but starting October 1, 2026, every span becomes a billable observability event: Free tier gets 200,000 events/day with 3-day retention, Paid gets 20 million/month at $0.60 per additional million. Worth auditing your framework choice and payload settings before that date. [Read more](https://daily.dev/posts/Khl5Jjspw) ## Two years running REST and gRPC in production: the verdict A detailed retrospective concludes gRPC delivers on latency and throughput but the operational tax is steeper than most teams expect. Binary encoding makes basic debugging, logging, and third-party integration painful — things that are trivially easy with REST's human-readable HTTP. The author's take: gRPC belongs in high-volume internal service-to-service paths where performance is the actual bottleneck, not as a default choice. For most services, REST's universal tooling support wins. [Read more](https://daily.dev/posts/gQXPOCN5O) ## Postgres as the coordination layer for autonomous agents A retrospective on building Looper, an experimental multi-agent system, documents how a summer of org-chart-style agent hierarchies produced almost no real autonomous work. An adversarial audit found most loops were observe-only, a code-fixing agent had an unsatisfiable success predicate, and kill switches were silently broken. The redesign puts Postgres at the center: campaign rows with leases, fencing tokens, a trigger-enforced state machine, append-only hash-chained events, and stored functions as the only write path. The redesign hasn't been proven yet — the author defines success as seven days of zero human intervention, independently verified — but the failure analysis alone is worth reading. [Read more](https://daily.dev/posts/HqVMC46rn) --- ## Also notable - **Node.js shifts to one major release per year starting with Node.js 27:** Node.js Interactive 2026 confirmed the cadence change to a single major per year, alongside QUIC/HTTP-3 progress via node:quic and a new doc-kit documentation pipeline. [Read more](https://daily.dev/posts/4X26F7SFK) - **pnpm 12 RC5 reaches feature parity with pnpm 11 in its Rust rewrite:** The RC adds deterministic dependency-cycle resolution on top of full pnpm 11 feature parity; three Docker Engine symlink/path-traversal CVEs and a Flatpak sandbox escape are also in this week's package management security roundup. [Read more](https://daily.dev/posts/TGG3vj4uh) - **Project Valhalla's first preview (JEP 401) redefines == semantics for value objects:** JEP 401 is now in preview, changing how equality works for value types — a breaking semantic shift worth tracking if you maintain Java libraries or frameworks. [Read more](https://daily.dev/posts/peiOe1xl3) - **Rails after_commit vs after_save: Active Job's enqueue_after_transaction_commit defaults false in Rails 8.1.3:** The default means jobs can still be enqueued before a transaction commits, causing intermittent RecordNotFound errors in workers — the post traces the fix and recommends an outbox pattern for billing-critical obligations. [Read more](https://daily.dev/posts/JmpytyRLH) - **Cloudflare Cache Response Rules let teams modify Cache-Control after origin response, before cache write:** Available on all plans, the new rules phase fixes accidental cache misses from stray Set-Cookie, ETag, and Last-Modified headers without touching origin code. [Read more](https://daily.dev/posts/nplkOsNPk) ## Similar posts on daily.dev - [Massive ChainDrop npm supply-chain attack infects hundreds of packages](https://daily.dev/posts/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages-uhzbslfdu) · BleepingComputer · 3 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#nodejs](https://daily.dev/tags/nodejs), [#cloudflare](https://daily.dev/tags/cloudflare), [#npm](https://daily.dev/tags/npm), [#grpc](https://daily.dev/tags/grpc) [View this post on daily.dev](https://daily.dev/posts/chaindrop-hits-444-npm-packages-cloudflare-agent-tracing-goes-paid-in-october-ksmhvkyyc) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/chaindrop-hits-444-npm-packages-cloudflare-agent-tracing-goes-paid-in-october-ksmhvkyyc","headline":"ChainDrop hits 444 npm packages, Cloudflare agent tracing goes paid in October","text":"A new npm worm called ChainDrop has poisoned 444 packages and is evading standard supply-chain defenses — bad timing given npm 12's new opt-in defaults are still rolling out. Cloudflare launched agent tracing for Workers, but payload defaults are inconsistent across frameworks and the free tier ends October 1. Node.js Interactive 2026 surfaced two supply-chain incidents and a shift to one major release per year. On the backend fundamentals side, a two-year gRPC-vs-REST retrospective lands with a clear verdict: gRPC's operational cost is real and most teams underestimate it.","url":"https://daily.dev/posts/chaindrop-hits-444-npm-packages-cloudflare-agent-tracing-goes-paid-in-october-ksmhvkyyc","datePublished":"2026-08-16T04:18:15.776Z","dateModified":"2026-09-13T21:12:34.733Z","author":{"@type":"Organization","name":"Backend Digest","logo":"https://media.daily.dev/image/upload/s--9uCSrsAb--/f_auto,q_auto/v1773839398/logos/backend_digest?_a=BAMAMiiu0","url":"https://daily.dev/sources/backend_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/backend_digest","name":"Backend Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Backend Digest","item":"https://daily.dev/sources/backend_digest"},{"@type":"ListItem","position":3,"name":"ChainDrop hits 444 npm packages, Cloudflare agent tracing goes paid in October"}]} ```