Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Keyv npm Package with 127M Weekly Downloads Compromised in Shai-Hulud Attack
Attackers have compromised the GitHub account of the maintainer behind keyv, a popular key-value storage library that pulls in roughly 127 million weekly downloads on npm, and used that access to push credential-stealing malware across the maintainer’s entire package portfolio. The breach, which unfolded on August 4, 2026, marks one of the largest npm supply […] The post Keyv npm Package with 127M Weekly Downloads Compromised in Shai-Hulud Attack appeared first on Cyber Security News.
Attackers have compromised the GitHub account of the maintainer behind keyv, a popular key-value storage library that pulls in roughly 127 million weekly downloads on npm, and used that access to push credential-stealing malware across the maintainer’s entire package portfolio. The breach, which unfolded on August 4, 2026, marks one of the largest npm supply chain incidents to date,…
Excerpt shown under the publisher's RSS terms · 59 words · full text and figures are on the publisher's site
Related coverage
Popular npm Package With 150K Weekly Downloads Compromised in Mini Shai-Hulud Supply-Chain Attack
Cybersecurity News · Sep 1, 2026
New Shai-Hulud Supply Chain Attack Compromised 400+ Popular npm Packages
Cybersecurity News · Aug 6, 2026
This Week In Security: Claude Gets Hacking, Hotel WiFi, And NPM Compromised Again
hackaday.com · Aug 7, 2026
Shai-Hulud CHAINDROP Worm Backdoors 400+ npm Packages With 1.3 Billion Monthly Downloads
Cybersecurity News · Aug 7, 2026