Analysis of ‘ChainDrop’ reveals a self-propagating npm supply chain worm that extracts GitHub Actions runner secrets. Uniquely, it leverages Ethereum smart contracts for Command and Control (C2) routing, demonstrating an innovative method for malware communication. This sophisticated technique makes detection and takedown more challenging.