待翻译：Keyv and friends compromised in active Shai-Hulud supply chain attack

AI 服务暂时不可用，以下为来源正文，待恢复后补全翻译。

Keyv and friends compromised in active Shai-Hulud supply chain attack Ilyas Makari Published on: Aug 4, 2026 On August 4, 2026, attackers compromised the GitHub account of the maintainer behind keyv, a key-value storage library with roughly 127 million weekly npm downloads, and used that access to inject credential-stealing malware across the entire package family. The same maintainer owns cacheable (29M downloads/month), flat-cache (565M downloads/month), file-entry-cache (557M downloads/month), and several other widely-used caching utilities, all of which were swept up in the same attack. The compromise was carried out by pushing malicious files directly to the main branch and then immediately cutting a new release, meaning the poisoned versions were published to npm with valid provenance signed by GitHub Actions. The compromised packages include: keyv (127M weekly downloads) cacheable (29M/month) cache-manager (16M/month) cacheable-request (133M/month) flat-cache (565M/month) file-entry-cache (557M/month) @cacheable/node-cache (5.9M/month) @cacheable/memory (28M/month) @cacheable/utils (34M/month) ecto We are also also seeing very active community spread of this supply chain worm to other maintainers and packages, including major organisations: @deliveroo/reevent 1.0.1 @or-sdk/invitations 1.4.9 @picsart/ai-sdk 3.32.2 @qlik/embed-runtime 1.6.4 picasso.js 2.11.6 What happened Every package in the family received two new files, setup.mjs and Math_Symbol.js, along with a "preinstall": "node setup.mjs" entry added to each package.json. Anyone who ran npm install against an affected version would have had setup.mjs execute automatically before their install completed. setup.mjs is a heavily obfuscated dropper. Its only job is to silently download the Bun JavaScript runtime from github[.]com/oven-sh/bun/releases/download/bun-v1.3.13/ and use it to execute the real payload, Math_Symbol.js: execFileSync(, ['/Math_Symbol.js'], { stdio: 'inherit', cwd: }) What it steals Math_Symbol.js implements a set of credential extractors, each targeting a different secret store on the victim machine. The payload harvests npm registry auth tokens from .npmrc, GitHub CLI tokens (classic PATs, session tokens, and OIDC tokens) from the GitHub CLI config, AWS access keys and session tokens from ~/.aws/credentials, and HashiCorp Vault client tokens from the VAULT_TOKEN environment variable, with a fallback attempt to retrieve a token via HTTP. How Aikido detects this If you are an Aikido user, check your central feed and filter on malware issues. This will surface as a 100/100 critical issue. Aikido rescans nightly, but we recommend triggering a manual rescan now. If you are not yet an Aikido user, you can create an account and connect your repos. Our malware coverage is included in the free plan, no credit card required. For broader coverage across your whole team, Aikido's Device Protection gives you visibility and control over the software packages installed on your team's devices. It covers browser extensions, code libraries, IDE plugins, and build dependencies, all in one place. Stop malware before it gets installed. For future protection, consider Aikido Safe Chain (open source). Safe Chain sits in your existing workflow, intercepting npm, npx, yarn, pnpm, and pnpx commands and checking packages against Aikido Intel before install. https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack 4.7/5 Tired of false positives? Try Aikido like 100k others. Start Now Trusted by 100k+ teams Book Now Trusted by 100k+ teams Start Scanning Trusted by 100k+ teams Start Testing Start Now Similar Posts See all July 31, 2026 • Vulnerabilities & Threats Anthropic's Fever Dream: Claude's package that stole real keys Anthropic disclosed an agent that pushed real malware to PyPI. We think we found the package, and every mistake in it points back to the AI. # AI # AI Safety # Malware July 22, 2026 • Vulnerabilities & Threats Finding eight high-severity vulnerabilities in NodeBB in six hours Eight high-severity NodeBB vulnerabilities, found by our AI Pentest in six hours. Full technical breakdown of the XSS chains, auth bypasses, and post hijacking. # AI Penetration Testing # Vulnerabilities July 19, 2026 • Vulnerabilities & Threats SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts SleeperGem: two dormant RubyGems maintainer accounts were hijacked to inject malware into trusted gems, one with over 500,000 total downloads # Malware Get secure now Secure your code, cloud, and runtime in one central system. Find and fix vulnerabilities fast automatically. Book a demo No credit card required | Scan results in 32secs.