Keyv and friends compromised in npm supply chain attack

Lobsters·5 points·dbremner·about 2 months ago·aikido.dev

Mini Shai-Hulud malware was injected into keyv and eight related npm packages on August 4, 2026 after an attacker compromised the maintainer's GitHub account

Read the full article at aikido.dev →

#npm #compromised #keyv #friends #attack #supply #chain #friends compromised

Related stories

An undercover Google analyst infiltrated a notorious supply-chain hacking gangarstechnica.com
Ars Technica · 0 points · 11 days ago
TanStack supply-chain attack exposed ~170 private CrowdSec reposcrowdsec.net
Hacker News · 6 points · 11 days ago
Anthropic is a supply chain risk for all of usbuilding138.com
Hacker News · 1 points · 3 days ago
Tracing the Supply Chain Attack on Androidkrebsonsecurity.com
Lobsters · 3 points · over 7 years ago
An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gangwired.com
Hacker News · 2 points · 10 days ago
An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gangwired.com
Hacker News · 2 points · 7 days ago

Related topics

packages13 linux worm3 fake17 linux196 fake express3 worm4 express7 compromised8 js38 chain27