--- title: ChainDrop worms through 444 npm packages, Entra ID... description: A new npm supply-chain worm called ChainDrop has compromised 444 packages including keyv and cache-manager, collectively pulling around 2 billion downloads a... canonical: https://daily.dev/posts/chaindrop-worms-through-444-npm-packages-entra-id-cve-2026-69836-exploited-in-the-wild-it2wiyeg6 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: ChainDrop worms through 444 npm packages, Entra ID CVE-2026-69836 exploited in the wild | daily.dev og:description: A new npm supply-chain worm called ChainDrop has compromised 444 packages including keyv and cache-manager, collectively pulling around 2 billion downloads a... og:url: https://daily.dev/posts/chaindrop-worms-through-444-npm-packages-entra-id-cve-2026-69836-exploited-in-the-wild-it2wiyeg6 og:image: https://api.daily.dev/og/posts/it2wiyEG6.png og:image:alt: ChainDrop worms through 444 npm packages, Entra ID CVE-2026-69836 exploited in the wild og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # ChainDrop worms through 444 npm packages, Entra ID CVE-2026-69836 exploited in the wild **[Security Digest](https://daily.dev/sources/security_digest)** · 5 min read · 0 upvotes · 0 comments ## Summary A new npm supply-chain worm called ChainDrop has compromised 444 packages including keyv and cache-manager, collectively pulling around 2 billion downloads a month, and spreads via rebuilt tarballs that leave no trace in git history. Microsoft patched a max-severity deserialization RCE in Entra ID (CVE-2026-69836) that was already being exploited before the fix landed. CISA ordered federal agencies to patch two actively exploited TrueConf Server RCEs by September 3. Anthropic's most capable model, Claude Mythos 5, is now accessible to Enterprise customers but only through a locked-down vulnerability scanner, not direct API access. ## Content **TLDR:** A new npm supply-chain worm called ChainDrop has compromised 444 packages including keyv and cache-manager, collectively pulling around 2 billion downloads a month, and spreads via rebuilt tarballs that leave no trace in git history. Microsoft patched a max-severity deserialization RCE in Entra ID (CVE-2026-69836) that was already being exploited before the fix landed. CISA ordered federal agencies to patch two actively exploited TrueConf Server RCEs by September 3. Anthropic's most capable model, Claude Mythos 5, is now accessible to Enterprise customers but only through a locked-down vulnerability scanner, not direct API access. --- ## ChainDrop npm worm: 444 packages compromised, spreads via rebuilt tarballs with no git trace ChainDrop, a variant of the Shai-Hulud worm family, has hit 444 npm packages including keyv, flat-cache, cacheable-request, and cache-manager — roughly 2 billion downloads a month combined. What makes it nastier than earlier variants: it propagates through rebuilt tarballs rather than source commits, so your git history looks clean even on infected packages. Once in, it scans for npm tokens, GitHub credentials, cloud keys, Kubernetes secrets, and OIDC tokens from GitHub Actions runner memory. It also plants malicious hooks in .claude/settings.json and .vscode/tasks.json that fire automatically when a developer opens an infected branch in VS Code or starts a Claude Code session. Check your Cargo.lock equivalents and treat any machine that installed affected versions as compromised. [Read more](https://daily.dev/feed-by-ids?id=5YJiXHGPg&id=tM4ld3t2E) ## CVE-2026-69836: max-severity Entra ID deserialization RCE, already exploited before patch Microsoft patched CVE-2026-69836, a deserialization of untrusted data flaw in Entra ID that let unauthenticated attackers run code remotely in low-complexity attacks — and it was already being exploited when the fix shipped. Microsoft says no customer action is required since the issue is fully mitigated server-side, but they haven't shared details on the observed exploitation. The same patch batch also covered four other max-severity flaws in Azure Arc, Exchange Online, and Azure Managed Instance for Apache Cassandra, plus a separately exploited critical RCE in Windows IKE Service Extensions flagged by CISA. [Read more](https://daily.dev/posts/TrNyz1ea4) ## CISA KEV: TrueConf Server CVE-2026-72529 and CVE-2026-72530 actively exploited, patch by September 3 CISA added two critical TrueConf Server flaws to its KEV catalog with a September 3 federal deadline. CVE-2026-72529 allows unauthenticated remote script execution via an undocumented function on TCP port 4307; CVE-2026-72530 enables sandbox escape via code injection. Kaspersky traces active exploitation back to July 2026 and attributes it to Head Mare, who trojanized TrueConf client installers to slip backdoors onto targets. This is TrueConf's second nation-state-adjacent campaign this year — a separate Chinese-linked zero-day (CVE-2026-3502) hit in April. If you're running TrueConf Server anywhere, including outside Russia, patching is the floor here. [Read more](https://daily.dev/posts/vhbdQKKpO) ## Anthropic gates Claude Mythos 5 behind a vulnerability scanner, no direct API access Claude Mythos 5 is now available to all Claude Enterprise customers, but only through Claude Security, Anthropic's GitHub-connected vulnerability scanner. You get CWE-tagged findings, severity scores, and suggested fixes — you don't get the model itself. Anthropic's Boris Cherny confirmed the restriction is intentional given Mythos-class models' offensive security capabilities. The timing is notable: Anthropic disclosed three of its models reached real organizations during misconfigured evaluations in July, and the broader rollout lands three weeks before the EU Cyber Resilience Act's vulnerability reporting rules kick in on September 11. Pricing is $10 per million input tokens, $50 per million output, with human review required before any suggested patch ships. Anthropic is also putting $35 million into a Defender Advantage Fund for open-source vulnerability patching. [Read more](https://daily.dev/posts/mx8OwK3CM) --- ## Also notable - **9,300+ active AWS keys exposed publicly, 526 are root keys:** Truffle Security found over 9,300 valid, unrotated AWS access keys scraped from code repos, Docker images, CI logs, and datasets — 526 are root keys, 242 tied to AdministratorAccess IAM users, with Hugging Face alone accounting for 8,482 unique exposures and a median key age of around five years. [Read more](https://daily.dev/posts/RtjxUag2x) - **Cloudflare patched a working remote Spectre attack against Workers:** Cloudflare discovered and fixed a working remote Spectre side-channel attack targeting its V8-isolate-based Workers platform, with no evidence of exploitation in the wild before the patch. [Read more](https://daily.dev/posts/kmDfUFVoG) - **Rust arrayref supply chain attack: three crates compromised via typosquatted proc-macro1, payload runs at compile time:** A supply chain attack on crates.io hit arrayref 0.3.10, internment 0.8.7, and append-only-vec 0.1.9 via a typosquatted proc-macro1 build script that executed a payload at compile time — no application code needed to call the crate; search Cargo.lock for affected versions and rotate credentials on any machine that built them. [Read more](https://daily.dev/posts/fxKUCkJdO) - **Apollo Global Management breach: SSNs and home addresses stolen via social engineering, July 6-10:** Apollo Global Management confirmed attackers stole names, birth dates, home addresses, and Social Security numbers from its cloud environment between July 6 and July 10 via a social engineering attack, part of a broader extortion campaign by threat actors impersonating IT helpdesks to hit Blackstone, Bridgewater, and Bain Capital, with some victims reportedly paying ransoms up to $750,000. [Read more](https://daily.dev/posts/nW1hhNrRw) - **SynkLoader malware spreads via Microsoft Teams IT helpdesk impersonation, targets AD environments for ransomware staging:** Expel researchers identified SynkLoader, a new malware family delivered via fake 'PowerShell Cleaner' MSIs hosted on Azure, deploying a fake Windows lock screen to steal passwords, a reverse proxy, remote shell, and VNC-style control — with Active Directory profiling suggesting ransomware pre-positioning. [Read more](https://daily.dev/posts/JACeZqj83) ## Similar posts on daily.dev - [Massive ChainDrop npm supply-chain attack infects hundreds of packages](https://daily.dev/posts/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages-uhzbslfdu) · BleepingComputer · 3 upvotes · 1 comments - [ChainDrop worm crawls into npm supply chain, evades standard defenses](https://daily.dev/posts/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses-vobyse76t) · The Register · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#vulnerability](https://daily.dev/tags/vulnerability), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/chaindrop-worms-through-444-npm-packages-entra-id-cve-2026-69836-exploited-in-the-wild-it2wiyeg6) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/chaindrop-worms-through-444-npm-packages-entra-id-cve-2026-69836-exploited-in-the-wild-it2wiyeg6","headline":"ChainDrop worms through 444 npm packages, Entra ID CVE-2026-69836 exploited in the wild","text":"A new npm supply-chain worm called ChainDrop has compromised 444 packages including keyv and cache-manager, collectively pulling around 2 billion downloads a month, and spreads via rebuilt tarballs that leave no trace in git history. Microsoft patched a max-severity deserialization RCE in Entra ID (CVE-2026-69836) that was already being exploited before the fix landed. CISA ordered federal agencies to patch two actively exploited TrueConf Server RCEs by September 3. Anthropic's most capable model, Claude Mythos 5, is now accessible to Enterprise customers but only through a locked-down vulnerability scanner, not direct API access.","url":"https://daily.dev/posts/chaindrop-worms-through-444-npm-packages-entra-id-cve-2026-69836-exploited-in-the-wild-it2wiyeg6","datePublished":"2026-08-22T04:18:44.718Z","dateModified":"2026-09-13T21:08:38.397Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"ChainDrop worms through 444 npm packages, Entra ID CVE-2026-69836 exploited in the wild"}]} ```