Palo Alto Networks Unit 42 research shows that ChainDrop, a self-propagating npm supply chain worm, extracts GitHub Actions runner memory secrets, targets specific repositories, and alters C2 domains with one Ethereum transaction.

Palo Alto Networks Unit 42 brings together world-renowned threat researchers with an elite team of incident responders and security consultants to create an intelligence-driven, response-ready organization passionate about helping customers more proactively manage cyber risk. With a deeply rooted reputation for delivering world-class threat intelligence, Unit 42 provides industry-leading incident response and cyber risk management services to security leaders around the globe.