npm supply-chain hardening in 2026: 9 controls to ship after the keyv worm

npm supply-chain hardening in 2026: 9 controls to ship after the keyv worm Summary. At 09:35 UTC on 4 August 2026, a compromised maintainer account published keyv 6.0.0 to npm with a preinstall hook a