ChainDrop npm worm reaches 1,300 packages with valid GitHub provenance
Chaindrop: 1,300 NPM Packages Signed, Sealed, and Fucked Right, here’s the grim little circus: the Chaindrop npm worm has managed to spread to roughly 1,300 packages, and the especially nasty bit is that many of them carried...
