HomeAI · summaries
Storia in 7 fonti
Supply chain attack on keyv: Shai-Hulud worm infects over 440 npm packages
The popular key-value database keyv and other widely used npm packages were targeted in a supply chain attack. The potential damage is significant.
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
thehackernews.com
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
A Keyv-linked npm worm poisoned 353 versions across 79 package names, stealing developer and CI credentials while repository hooks remained present.
- ·
bleepingcomputer.com
Massive ChainDrop npm supply-chain attack infects hundreds of packages
Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.
