Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks

2026-08-04来源 Snyk BlogEnglish
Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks
keyv 6.0.0 and ten related npm releases shipped install-time malware. See affected versions, hashes, detection steps, and safe remediation order.

原文：https://www.a8q9.cn/en/article/inside-the-keyv-npm-compromise-preinstall-malware-trusted-provenance-and-ide-hoo-b90e0d.html

相关文章