DevVentureBeatabout 3 hours ago
Keyv npm worm spreads via legitimate security check
11 min read
An attacker took over the keyv maintainer's GitHub account and published poisoned versions of keyv and sibling caching packages on npm. Security firm Aikido counted 868 compromised packages across 1,381 versions with over two billion monthly installs; JFrog traced 400-plus packages and 1,700 poisoned versions.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
