New Cyber Threats Emerge: npm Supply Chain Infiltration and CRPX0 Ransomware Escalation

A new "chain drop" worm has infiltrated the npm supply chain, utilizing evasion tactics to bypass standard defenses. Concurrently, the CRPX0 ransomware group has escalated its operations to include data sales after 47 victims refused payment demands, launching leak sites on both clear and dark web. These incidents highlight evolving supply chain attacks targeting development infrastructure and the continued evolution of ransomware tactics.