← Back to feed
general The Hacker News

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker News

A credential-stealing npm worm that first appeared in keyv@6.0.

Read the full story The Hacker News →

Related Coverage

general WeedHack Malware Spreads Through SEO-Poisoned Minecraft Sites Despite C2 Disruption GBHackers · Aug 25 general TruffleHog AWS Analyze reduces remediation time on leaked AWS credentials Help Net Security · Aug 25 general HOL Guard: Open-source antivirus for AI agents Help Net Security · Aug 25