ChainDrop worm crawls into npm supply chain, evades standard defenses

The ChainDrop variant of the Shai-Hulud npm worm has infected 444 npm packages, spreading stealthily via tarballs and dev-tool hooks, bypassing standard repository defenses and compromising critical developer credentials.

This Wire brief sits within Fusion42's coverage of Developer Tools and Cybersecurity. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.