How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Machine-Speed Credential Abuse: What the ChainDrop npm Worm Changes

calendar_today August 20, 2026 person Dwayne McDaniel domain gitguardian

ChainDrop hijacked 444 npm packages and 2B monthly downloads via a Claude Code hook. AI agents have collapsed the gap between credential theft and abuse

open_in_new Read original post