Keyv and friends compromised in npm supply chain attack

Keyv and friends compromised in npm supply chain attack
CRANK

Mini Shai-Hulud malware was injected into keyv and eight related npm packages on August 4, 2026 after an attacker compromised the maintainer's GitHub account

aikido.dev 11 days ago

Open page

https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack

1 comments

Yuta Hiroto

@hiroppy

9 days ago

keyv メンテナの GitHub アカウント侵害の報告書

Keyv and friends compromised in npm supply chain attack aikido.dev/blog/keyv-and-…