https://ayinedjimi-consultants.fr/news/ver-npm-keyv-444-paquets-supply-chain-2026
Ver npm keyv : 444 paquets compromis en supply chain
Oct 9, 2026 - Un ver npm a empoisonné 444 paquets JavaScript en août 2026 via la compromission du compte GitHub de keyv. Découvrez l'impact, les mécanismes et les…
supply chainvernpmkeyvpaquets
https://pulse.astek.net/timeline/cloud/2026-08-mini-shai-hulud-l-attaque-sur-keyv-et-cacheable-touche-des-paquets-a-plus-de-2-m
Mini Shai-Hulud: the keyv and cacheable attack hits packages with over 2 billion monthly downloads...
On 4 August 2026, after the hijacking of its maintainer's GitHub account, about ten npm packages of the keyv and cacheable family are booby-trapped by a...
shai huludminikeyvcacheableattack
https://www.upwind.io/feed/keyv-supply-chain-compromise-an-npm-worm-that-takes-its-orders-from-an-ethereum-smart-contract
Keyv Supply Chain Compromise: An npm Worm That Takes Its Orders From an Ethereum Smart Contract -...
Aug 4, 2026 - Executive Summary On August 4, 2026 at 09:35 UTC, keyv@6.0.0 was published to npm carrying a credential stealer, an npm worm, and a persistence mechanism
supply chainsmart contractkeyvcompromisenpm