keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...
Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...