www.aikido.dev/blog/keyv-an...
Keyv and friends compromised in npm supply chain attackMini Shai-Hulud malware was injected into keyv and eight related npm packages on August 4, 2026 after an attacker compromised the maintainer's GitHub accountwww.aikido.dev