Browsing Tag
Provenance Attestation
1 post
Inside the Chaindrop Supply Chain Attack
ChainDrop didn’t exploit a vulnerability. It stole a maintainer’s credentials, then used npm’s own publishing machinery to replicate across 1,300+ packages.