AI情报Aug 5, 2026AI情报
文章
An attacker compromised the GitHub account of the maintainer of the keyv npm library, releasing poisoned versions that carried a...
Credential-stealing worm. The supply chain attack affected millions of weekly downloads, highlighting vulnerabilities in open-source dependencies.
Data Cube AI 编辑部来源: VentureBeat
01
来源简报
An attacker compromised the GitHub account of the maintainer of the keyv npm library, releasing poisoned versions that carried a credential-stealing worm. The supply chain attack affected millions of weekly downloads, highlighting vulnerabilities in open-source dependencies.