Synthèse
Analysis of ChainDrop, an npm supply chain worm extracting GitHub Actions runner secrets and using Ethereum smart contracts for C2 routing.
Analysis of ChainDrop, an npm supply chain worm extracting GitHub Actions runner secrets and using Ethereum smart contracts for C2 routing.
Source originale
unit42.paloaltonetworks.com
Shai-Hulud strikes again: CHAINDROP worm hits 400+ npm packages ↗
elastic.co · 6 août
Mini Shai-Hulud npm Attack: More Than 2,200 Components Impacted ↗
sonatype.com · 5 août
CORTEX