keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...
The Shai Hulud variant’s blast radius includes several highly popular packages thus far.. Security teams are urged to perform ...
Upwind identified a malicious release of keyv@6.0.0 that harvested AWS, GitHub, and npm credentials via a hidden preinstall script. With 154 million weekly downloads, the compromise had ecosystem-wide ...
Aikido Security says an npm supply chain attack has infected Keyv packages with a variant of the credential-stealing ...
Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the ...
The popular key-value database keyv and other widely used npm packages were targeted in a supply chain attack. The potential ...
A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...
The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...
A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results