A self-propagating supply chain worm named CanisterSprawl spreads through stolen developer npm tokens. The malware is triggered during install time via a postinstall hook to steal credentials and secrets from developer environments, then leverages stolen npm tokens to push poisoned versions of packages to the registry with new malicious postinstall hooks. The worm also contains PyPI propagation logic, generating Python .pth-based payloads and uploading malicious Python packages with Twine if credentials are present. Data is exfiltrated to HTTPS webhooks and ICP canisters. Related attacks include compromised xinference Python package versions, malicious Kubernetes utility packages that install Go-based binaries for proxy services, and AI-powered campaigns exploiting GitHub Actions pull_request_target workflow triggers.