ChainDrop worm crawls into npm supply chain, evades standard defenses from www.theregister.com - Articles on 2026-08-15 10:31 (#77PX4) Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks