Tracking Shai-Hulud: Inside the ChainDrop NPM Worm

Source: Zscaler.com· Manisha Ramcharan Prajapati (Sr. Security Researcher)· August 11, 2026

IntroductionOn August 4, 2026, a self-propagating worm called ChainDrop entered the npm ecosystem through a compromised maintainer account. ChainDrop is a variant of Mini Shai-Hulud linked to TeamPCP. ChainDrop anchored its C2 infrastructure in an Ethereum sm…

This story was reported by Zscaler.com. Read the full original article:

Read on Zscaler.com

More in Products & Launches

View all

hugpy-agent 0.1.57

Portable agent runtime powered by the Hugpy self-hosted LLM fleet

Pypi.org · Aug 11, 2026

12,000 People Came to Vegas to Talk About Something Invisible

Ai4 2026's record turnout for AI arrives just as the term itself starts disappearing from everyday language. Continue reading...

CMSWire · Aug 11, 2026

Alion – Showcase your code and get matched with top AI and engineering roles

Showcase your code and get matched with top AI and engineering roles

Betalist.com · Aug 11, 2026

Peer-Reviewed Study Exposes How Big Tech and Big Oil Work 'Hand-in-Glove' to Profit Off AI

As people across the United States protest against artificial intelligence data centers and their impact on utility bills, the local environment, and the climate, a new study highlights an overlooked way AI is increasing emissions that heat the planet.Holly A…

Common Dreams · Aug 11, 2026