ChainDrop worm crawls into npm supply chain, evades standard defenses

Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks

To respect copyright, we link to the source rather than republishing the full text. Read the complete article on The Register.