Skip to content
AI情报Aug 5, 2026AI情报
文章

An attacker compromised the GitHub account of the maintainer of the keyv npm library, releasing poisoned versions that carried a...

Credential-stealing worm. The supply chain attack affected millions of weekly downloads, highlighting vulnerabilities in open-source dependencies.

Data Cube AI 编辑部来源: VentureBeat
01

来源简报

An attacker compromised the GitHub account of the maintainer of the keyv npm library, releasing poisoned versions that carried a credential-stealing worm. The supply chain attack affected millions of weekly downloads, highlighting vulnerabilities in open-source dependencies.