keyv npm Supply Chain Attack: Shai-Hulud Returns
Date Observed: August 4, 2026Ecosystem: npmTargets: CI/CD runners and developer workstations consuming keyv, cacheable, flat-cache, file-entry-cache, cache-manager, plus 400+ downstream packagesAttack Type: Maintainer account compromise (initial-access method unconfirmed) leading to a self-replicating credential-stealing wormImpact: Credential theft from developer machines and CI runners, automatic republishing to every package the victim can write to Key Takeaways Introduction […]