Summary

The Register reports that ChainDrop poisoned 444 npm packages and can activate through configuration used by environments such as VS Code and Claude Code. The campaign is designed to harvest npm tokens, cloud credentials, and other secrets, while dependency scanning may not detect the configuration-based payload.

Why it matters

The incident expands software supply-chain risk from package contents into the agent and editor configuration that developers routinely trust and execute.

Sources