npm supply-chain hardening in 2026: 9 controls to ship after the keyv worm
npm supply-chain hardening in 2026: 9 controls to ship after the keyv worm
Summary. At 09:35 UTC on 4 August 2026, a compromised maintainer account published keyv 6.0.0 to npm with a preinstall hook a
ecorpit.hashnode.dev20 min read