Unit 42

Reported Context (1)

During Black Hat week, ChainDrop began spreading across npm, infecting more than 400 packages. Unit 42 found that the worm stole npm and GitHub tokens, SSH keys, kubeconfigs, and other developer secrets. An embedded Black Hat and DEF CON Roundup: Hugging Face Compromise, North Korean Operations and Security Funding

CVE (3)

Malware (1)

People (5)

Vendors (22)

Products (34)

Tools (4)

Industries (3)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.