AI Weekly Malaysia

A new variant of the Shai-Hulud npm worm, dubbed 'ChainDrop,' was identified on August 4, 2026, infecting 444 npm packages collectively downloaded ~2 billion times monthly, including widely used infrastructure dependencies like keyv, flat-cache, and cache-manager. Unlike typical supply chain attacks, ChainDrop propagates via tarballs rather than source commits, evading standard repository defenses, and can trigger infection simply by opening an infected Git branch in VS Code or Claude Code—no `npm install` required. Once active, it harvests npm tokens, cloud keys, and secrets from shell configs, environment variables, and live memory, then uses stolen npm tokens to download and re-poison tarballs of all packages that token can access.

Why: If you maintain or consume npm packages—especially deep infrastructure dependencies like keyv, flat-cache, or cache-manager—you should audit your npm tokens for full-write scope, rotate any that are overprivileged, and check whether your Git repository config files contain unexpected startup hooks. The tarball-based propagation means reviewing source diffs alone will not reveal infection; you need to inspect published tarballs directly. Teams using VS Code or Claude Code should be aware that merely opening a compromised branch can execute the worm.

Two malicious VS Code extensions ('helper-beeps.solidity-pro' and 'web3devtoolsx.solidity-pro') were found delivering an information stealer targeting Solidity/Web3 developers. Versions 1.0.0–2.4.x beaconed to Cloudflare Workers for encrypted Python payloads; v3.0.0+ became a full stealer harvesting GitHub/GitLab tokens, AWS keys, Cloudflare tokens, OpenAI API keys, Telegram bot tokens, crypto wallet vaults, SSH keys, and 1Password MFA tokens, exfiltrating via Telegram bot upload. The malware uses obfuscation, clean intermediate versions to build trust, and randomized delayed activation hours or days after installation to evade sandbox scanning.

Why: If you develop in VS Code with community extensions—especially Web3 or Solidity tooling—audit installed extensions now and revoke any GitHub, GitLab, AWS, Cloudflare, OpenAI, or Telegram bot tokens that may have been exposed. The delayed activation means a recently installed extension that seemed fine for days could still be malicious; remove anything matching 'solidity-pro' and rotate credentials proactively.