npm-incident-response

npm-incident-response English | Português Standalone scanner for the keyv/cacheable supply-chain incident "Shai-Hulud: Here We Go Again", Aug 4 2026 — 440+ npm packages compromised by a self-propagating worm that steals cloud/CI credentials and plants persistence with a dead-man's switch. Detects...

MSC-2026-6430

Shai-Hulud supply chain attack: the keyv/cacheable npm package family was compromised on 2026-08-04 after attackers took over the maintainer's GitHub account, pushed malicious files to the main branch, and immediately cut new releases published to npm with valid GitHub Actions provenance. Each...