New ChainDrop worm poisons over 1,300 npm packages, Keyv and Cacheable among those hit

Another Shai-Hulud variant hits npm packages, worming its way into hundreds of packages.