Keyv npm Supply Chain Attack Hits 2 Billion Installs

By Editorial Team | August 6, 2026
Keyv npm Supply Chain Attack Hits 2 Billion Installs

The Keyv npm supply chain attack compromised a single GitHub maintainer account and used it to push a credential-stealing worm into hundreds of widely used caching packages. By August 5, trackers put the count at 868 packages and 1,381 versions, spanning a combined 2 billion-plus monthly installs — the largest software supply-chain incident DIESEC has…

Read More