--- title: Metabase 0-day actively exploited, ChainDrop hits 1,300... description: A critical 0-day SQL injection in Metabase is being actively exploited against cloud instances — self-hosted users need to patch immediately across six version... canonical: https://daily.dev/posts/metabase-0-day-actively-exploited-chaindrop-hits-1-300-npm-packages-qn0kqhrvh twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Metabase 0-day actively exploited, ChainDrop hits 1,300 npm packages | daily.dev og:description: A critical 0-day SQL injection in Metabase is being actively exploited against cloud instances — self-hosted users need to patch immediately across six version... og:url: https://daily.dev/posts/metabase-0-day-actively-exploited-chaindrop-hits-1-300-npm-packages-qn0kqhrvh og:image: https://api.daily.dev/og/posts/Qn0kqhRVh.png og:image:alt: Metabase 0-day actively exploited, ChainDrop hits 1,300 npm packages og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Metabase 0-day actively exploited, ChainDrop hits 1,300 npm packages **[Security Digest](https://daily.dev/sources/security_digest)** · 5 min read · 1 upvotes · 0 comments ## Summary A critical 0-day SQL injection in Metabase is being actively exploited against cloud instances — self-hosted users need to patch immediately across six version branches. A supply chain attack called ChainDrop compromised over 1,300 npm package versions including keyv (600M+ monthly downloads), with malicious versions carrying valid GitHub Actions provenance signatures. The Zapscape KVM guest-to-host escape is now public with a proof-of-concept, affecting Linux kernels from mid-2020 through July. Google's threat intelligence team linked the UNC6671 extortion group to attacks on major financial firms including Apollo, Blackstone, and KKR, with over $10.6 million in tracked Bitcoin payments. ## Content **TLDR:** A critical 0-day SQL injection in Metabase is being actively exploited against cloud instances — self-hosted users need to patch immediately across six version branches. A supply chain attack called ChainDrop compromised over 1,300 npm package versions including keyv (600M+ monthly downloads), with malicious versions carrying valid GitHub Actions provenance signatures. The Zapscape KVM guest-to-host escape is now public with a proof-of-concept, affecting Linux kernels from mid-2020 through July. Google's threat intelligence team linked the UNC6671 extortion group to attacks on major financial firms including Apollo, Blackstone, and KKR, with over $10.6 million in tracked Bitcoin payments. --- ## Metabase 0-day actively exploited: SQL injection grants admin access, self-hosted users must patch now A critical 0-day in Metabase versions 1.58 and above allows attackers to inject arbitrary SQL against the application database, potentially granting administrator access and exposing stored database credentials. Metabase Cloud is already patched. Self-hosted users must upgrade to the minimum safe release for their branch: 0.58.24, 0.59.21, 0.60.17, 0.61.11, 0.62.9, or 0.63.5. The attack pattern is a POST to /api/session/reset_password returning 400 followed by a GET to /api/user/current returning 200 — if that endpoint is publicly accessible, run TRUNCATE TABLE core_session after upgrading. Block /api/session/reset_password as a temporary workaround if you can't patch immediately. [Read more](https://daily.dev/posts/M1ITh081A) ## ChainDrop supply chain attack compromises keyv and 867 other npm packages via maintainer account takeover A new malware campaign called ChainDrop infected over 1,300 npm package versions across 868 packages after attackers compromised the maintainer account for keyv, which pulls 600 million downloads per month. The infection spread to flat-cache, file-entry-cache, cacheable-request, and others. The particularly nasty detail: attackers pushed malicious versions with valid GitHub Actions provenance signatures, bypassing npm's provenance checks entirely. The payload includes an obfuscated dropper that downloads the Bun runtime to execute its second stage. Affected companies include Deliveroo, Picsart, and ServiceTitan. Audit your lockfiles and check for unexpected setup.mjs files in your node_modules. [Read more](https://daily.dev/posts/0kFFJfdOh) ## Zapscape: KVM guest-to-host escape via use-after-free in shadow MMU, public PoC released Zapscape is a newly disclosed KVM vulnerability affecting Linux kernel x86/x86_64 from mid-2020 through July 21 when it was patched. It exploits a use-after-free in KVM's shadow MMU emulation code, letting a guest attacker panic the host kernel or execute code as root on the host — compromising every VM on the same physical machine. On RHEL and distributions where /dev/kvm is world-writable (0666), it also works as a local privilege escalation for unprivileged users. A non-weaponized proof-of-concept is public. Patch your kernels. [Read more](https://daily.dev/posts/aunLVstxO) ## UNC6671 extortion group hits Apollo, Blackstone, KKR and other major financial firms via vishing and AiTM Google's Threat Intelligence Group identified UNC6671 — operating as Falcon, Helix, Pink, and Redact — behind a wave of attacks on large US financial and investment firms. The method is vishing: attackers call employees on personal phones impersonating IT help desk staff, directing them to adversary-in-the-middle phishing sites that steal Microsoft 365 and Okta credentials, MFA codes, and session cookies. Between January and May 2026, GTIG tracked over $10.6 million in Bitcoin payments to wallets associated with the group, with initial ransom demands up to $3 million typically settling around $750,000. The group is linked to the BlackFile extortion campaign and is distinct from Scattered Spider despite overlapping tactics. [Read more](https://daily.dev/posts/OAh6AOS3e) --- ## Also notable - **TONTOU bypasses Spectre v2 mitigations on AMD Zen 1-4, leaks kernel memory at 5.47 bytes/sec:** MIT CSAIL researchers disclosed TONTOU at Black Hat, a timing attack that re-poisons the branch predictor by injecting an interrupt between Safe RET neutralization and use, leaking arbitrary kernel memory at 5.47 bytes/second on Zen 2 — slow enough that extracting /etc/shadow takes ~18 minutes per attempt, but it works; a patch is merged into the Linux kernel tree. [Read more](https://daily.dev/posts/EeHfznSYD) - **iCloud Private Relay leaks real IP via WebAuthn, DNS prefetch, and WebTransport — fix not until autumn 2026:** Researchers Talal Haj Bakry and Tommy Mysk demonstrated three separate bypass methods in iCloud Private Relay affecting all iOS browsers (which are forced onto WebKit), with Apple confirming the issues and scheduling a fix for autumn 2026 — meaning anyone relying on Private Relay for IP privacy is currently unprotected. [Read more](https://daily.dev/feed-by-ids?id=o1sMJfYeE&id=4mlak2klY) - **NatJack: NAT connection tracking attacks hit all 32 tested products, Linux kernel patched as CVE-2026-63913:** Researcher Malcolm Stagg disclosed NatJack at Black Hat, showing TCP hijacking, DNS poisoning, and port identification attacks against NAT implementations without requiring Layer 2 access — every one of 32 products across 95 configurations was vulnerable to at least some techniques, with the Linux kernel patched as CVE-2026-63913 and Windows Hyper-V NAT as CVE-2026-56181. [Read more](https://daily.dev/posts/kSuUIJyjx) - **Swiss federal SharePoint breach compromised 200 accounts via July 2026 Patch Tuesday CVEs:** Switzerland's BIT confirmed attackers compromised approximately 200 accounts on its Microsoft SharePoint servers, likely exploiting CVE-2026-56164 (privilege escalation) or CVE-2026-50522 (critical RCE used to steal machine keys) — both patched in the July 2026 Patch Tuesday updates that were apparently not applied in time. [Read more](https://daily.dev/posts/B9UhLFHIq) - **tl;dv left 181,874 meetings readable by any logged-in user for six months with no response to disclosure:** Researcher BobDaHacker found tl;dv's Cloud Firestore had no tenant isolation, exposing metadata for 181,874 meetings across 84,312 users including government sessions from 23 countries — and was able to join active calls by impersonating an AI notetaker bot ~80% of the time; the vulnerability was reported in January 2026 and was still live at publication with no response from the CTO. [Read more](https://daily.dev/posts/RbI40l2h6) ## Similar posts on daily.dev - [Massive ChainDrop npm supply-chain attack infects hundreds of packages](https://daily.dev/posts/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages-uhzbslfdu) · BleepingComputer · 3 upvotes · 1 comments - [This Week In Security: The Supply Chain Has Problems](https://daily.dev/posts/this-week-in-security-the-supply-chain-has-problems-e5yi4rj1g) · Hackaday · 1 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#sql](https://daily.dev/tags/sql), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/metabase-0-day-actively-exploited-chaindrop-hits-1-300-npm-packages-qn0kqhrvh) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/metabase-0-day-actively-exploited-chaindrop-hits-1-300-npm-packages-qn0kqhrvh","headline":"Metabase 0-day actively exploited, ChainDrop hits 1,300 npm packages","text":"A critical 0-day SQL injection in Metabase is being actively exploited against cloud instances — self-hosted users need to patch immediately across six version branches. A supply chain attack called ChainDrop compromised over 1,300 npm package versions including keyv (600M+ monthly downloads), with malicious versions carrying valid GitHub Actions provenance signatures. The Zapscape KVM guest-to-host escape is now public with a proof-of-concept, affecting Linux kernels from mid-2020 through July. Google's threat intelligence team linked the UNC6671 extortion group to attacks on major financial firms including Apollo, Blackstone, and KKR, with over $10.6 million in tracked Bitcoin payments.","url":"https://daily.dev/posts/metabase-0-day-actively-exploited-chaindrop-hits-1-300-npm-packages-qn0kqhrvh","datePublished":"2026-08-07T04:18:44.989Z","dateModified":"2026-09-13T21:22:40.033Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"Metabase 0-day actively exploited, ChainDrop hits 1,300 npm packages"}]} ```