A worm tore through npm by making the malware look perfectly legitimate

A self-spreading worm tore through npm on Tuesday. It poisoned hundreds of packages that huge swathes of the software world quietly rely on. Researchers named it ChainDrop.

Source: [TNW](https://thenextweb.com/news/chaindrop-npm-worm-shai-hulud-provenance-ai-tools)