ChainDrop: Inside a Self-Propagating npm Worm

Unit 42 reporting covers major cybersecurity threats and research, including the ChainDrop self-propagating npm supply-chain worm stealing GitHub Actions secrets and using Ethereum smart contracts for C2, AI-assisted attacks and vulnerability discovery, passkey implementation weaknesses, XCSSET macOS malware, webmail espionage, Siemens ROX II OT zero-days, IoT botnets, ransomware, and information-stealing malware. The collection emphasizes supply-chain compromise, credential and secret theft, autonomous exploitation, persistence, and critical infrastructure risk.