npm Supply Chain Attack: 868 Packages Infected with Credential-Stealing Worm

A major npm supply chain attack compromised keyv and other popular packages, infecting 868 packages with credential-stealing worms, affecting millions of downloads; developers urged to act.

2026-08-04 ~ 2026-08-04 · 3 related posts

• npm Supply Chain Attack Hits 868+ Packages With Credential-Stealing Worm — RSync25 · 2026-08-04
• Active npm Supply Chain Attack: keyv and Core Packages Hit by Credential-Stealing Worm — DanielLockyer · 2026-08-04
• Warning: Supply Chain Malware Attack Hits keyv npm Package — altryne · 2026-08-04