supply-chain-attack
Latest stories covering supply-chain-attack, with summaries and links to related coverage.
1 articles · page 1 of 1
Connected topics
Keyv and friends compromised in active Shai-Hulud supply chain attack
news
7 min read
On August 4, 2026, attackers compromised the GitHub account of the maintainer of the Keyv library, which has approximately 127 million weekly npm downloads. The attackers injected a credential-stealing worm into Keyv and several other widely-used packages owned by the same maintainer, including Cacheable, Flat-cache, and File-entry-cache.