A self-propagating npm worm hit keyv, cacheable, and hundreds of dependent packages to steal CI/CD, cloud, and API credentials. Here’s what to do now.
ChainDrop: The Mini Shai Hulud npm worm’s latest wave hits keyv and cacheable
calendar_today
August 4, 2026
domain
expel