10:36
2026-08-04
socket.dev
ai-tools
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Socket's Threat Research Team reported an active supply chain attack on August 4, 2026, that compromised the npm packages keyv and cacheable, affecting tens of millions of weekly downloads. The attack…