ChainDrop poisons 444 npm packages

ChainDrop, a new Shai-Hulud variant, poisoned 444 npm packages and 2,212 versions in under four hours, according to StepSecurity’s incident analysis; Microsoft’s forensic report says the payload can harvest credentials and inject persistence into Claude Code and VS Code configuration. The immediate operator lesson is to treat repository-supplied configuration as executable, audit lockfiles and branches, and rotate credentials from a clean host after exposure—not merely bump a dependency. It sharpens the control boundary described in GitHub’s agent-app workflow: the repository is now both an agent launchpad and a supply-chain security boundary.