NPM Packages in the Keyv and Cacheable Namespaces Compromised

5 hours ago

Socket's Threat Research Team is tracking an active supply chain compromise affecting keyv and cacheable npm packages, with ten malicious packages published on August 4, 2026.
The attack uses a malicious preinstall hook (setup.mjs) that downloads a standalone Bun runtime, executes obfuscated second stage, harvests cloud/CI credentials, and republishes trojanized versions via stolen npm tokens.
The maintainer account (Jaredwray) was compromised, and the worm spread to packages outside the keyv/cacheable namespaces using stolen npm tokens and OIDC trusted publishing.
Credential theft targets AWS, GCP, Azure keys, HashiCorp Vault, Kubernetes tokens, GitHub Actions OIDC, npm tokens, and performs a TruffleHog-style regex sweep for generic secrets.
Self-propagation: the payload repackages other npm packages with the same hook and republishes them via npm OIDC trusted publishing, turning the attack into a worm.
Exfiltration: stolen data is committed to threat actor GitHub repositories and delivered to DNS-resolved destinations, with encrypted payloads using AES-256-GCM.
Persistence includes autostart hooks in .claude and .vscode, plus a host-level dead-man's switch that triggers upon token revocation, executing a remote-supplied command.
The affected packages have tens of millions of weekly downloads; Socket detected malicious artifacts an average of 5 minutes 18 seconds after publication.
Mitigation: pin affected packages to previous versions, block entire keyv and cacheable scopes, remove dead-man's switch and implants before rotating credentials, and audit accounts.
The attack demonstrates that provenance attests build integrity, not source integrity, as the build was trojanized before signing.

Shai-Hulud and the risks of external dependencies6 days ago

Shai-Hulud is an npm supply-chain malware by TeamPCP, named after the sandworms from Dune, which compromised 500 packages, breached hundreds of organizations, stole 300 GB of data, and exfiltrated ~500,000 credentials.
The malware's source code was released on May 11; analysis shows it uses simple tricks like credential theft and string obfuscation rather than advanced exploits, with inconsistent, buggy, and incomplete code.
It works by injecting malicious dependencies or preinstall scripts via OIDC or CI pipelines, stealing credentials (AWS, SSH, GitHub tokens, etc.), and exfiltrating data through encrypted channels or compromised GitHub repos.

North Korean Hackers Compromise Go and PHP Packagesa month ago

PolinRider is a DPRK-linked supply-chain campaign that takes over legitimate GitHub accounts and injects obfuscated JavaScript loaders into repositories.
Initially confined to GitHub, the campaign expanded to multiple package ecosystems including Packagist, Go modules, npm, and PyPI without evolving its malware.
Ecosystems like Go and Packagist are particularly vulnerable because they resolve packages directly from Git repos, making GitHub account takeovers equivalent to publishing access.

FBI: TeamPCP Compromised Dev Tools to Steal Cloud Credentialsa month ago

FBI issued a FLASH alert about the TeamPCP criminal group on July 2, 2026, detailing its large-scale software supply chain attacks targeting developer and security tools to steal credentials.
TeamPCP compromised tools including Trivy, KICS, LiteLLM, and Telnyx Python SDK by injecting malicious code into legitimate packages, which were then distributed through normal channels and pulled into CI/CD pipelines.
The group deployed four malware families: CanisterWorm, SANDCLOCK, Mini Shai-Hulud, and Miasma, harvesting cloud tokens, API keys, Kubernetes secrets, and cryptocurrency data, with worms spreading autonomously across npm and PyPI registries.

Keyv and friends compromised in active Shai-Hulud supply chain attack10 hours ago

On August 4, 2026, attackers compromised the GitHub account of the maintainer of keyv (127M weekly npm downloads) and used it to inject credential-stealing malware across the entire package family, including cacheable, flat-cache, file-entry-cache, and others.
Malicious files (setup.mjs and Math_Symbol.js) were pushed to the main branch and new releases were published with valid npm provenance signed by GitHub Actions.
The worm spread to at least 868 packages (1381 versions) with over 2 billion monthly installs, including packages from major organizations like Deliveroo, Picsart, and Qlik.

Telnyx, LiteLLM and Axios: the supply chain crisis8 days ago

A wave of supply chain attacks targeted popular npm packages (Telnyx, LiteLLM, axios) by injecting trojans to steal sensitive data, exploiting stolen credentials from previous attacks.
Attackers used compromised developer credentials to publish malicious versions, creating a vicious cycle of infections that amplified the reach of the attack.
LLMs are suspected to be accelerants, making it easier to find vulnerabilities and build sophisticated exploits, such as hiding code in audio files.

Shai-Hulud and the risks of external dependencies6 days ago

Shai-Hulud is an npm supply-chain malware by TeamPCP, named after the sandworms from Dune, which compromised 500 packages, breached hundreds of organizations, stole 300 GB of data, and exfiltrated ~500,000 credentials.
The malware's source code was released on May 11; analysis shows it uses simple tricks like credential theft and string obfuscation rather than advanced exploits, with inconsistent, buggy, and incomplete code.
It works by injecting malicious dependencies or preinstall scripts via OIDC or CI pipelines, stealing credentials (AWS, SSH, GitHub tokens, etc.), and exfiltrating data through encrypted channels or compromised GitHub repos.

North Korean Hackers Compromise Go and PHP Packagesa month ago

PolinRider is a DPRK-linked supply-chain campaign that takes over legitimate GitHub accounts and injects obfuscated JavaScript loaders into repositories.
Initially confined to GitHub, the campaign expanded to multiple package ecosystems including Packagist, Go modules, npm, and PyPI without evolving its malware.
Ecosystems like Go and Packagist are particularly vulnerable because they resolve packages directly from Git repos, making GitHub account takeovers equivalent to publishing access.

FBI: TeamPCP Compromised Dev Tools to Steal Cloud Credentialsa month ago

FBI issued a FLASH alert about the TeamPCP criminal group on July 2, 2026, detailing its large-scale software supply chain attacks targeting developer and security tools to steal credentials.
TeamPCP compromised tools including Trivy, KICS, LiteLLM, and Telnyx Python SDK by injecting malicious code into legitimate packages, which were then distributed through normal channels and pulled into CI/CD pipelines.
The group deployed four malware families: CanisterWorm, SANDCLOCK, Mini Shai-Hulud, and Miasma, harvesting cloud tokens, API keys, Kubernetes secrets, and cryptocurrency data, with worms spreading autonomously across npm and PyPI registries.

Keyv and friends compromised in active Shai-Hulud supply chain attack10 hours ago

On August 4, 2026, attackers compromised the GitHub account of the maintainer of keyv (127M weekly npm downloads) and used it to inject credential-stealing malware across the entire package family, including cacheable, flat-cache, file-entry-cache, and others.
Malicious files (setup.mjs and Math_Symbol.js) were pushed to the main branch and new releases were published with valid npm provenance signed by GitHub Actions.
The worm spread to at least 868 packages (1381 versions) with over 2 billion monthly installs, including packages from major organizations like Deliveroo, Picsart, and Qlik.

Telnyx, LiteLLM and Axios: the supply chain crisis8 days ago

A wave of supply chain attacks targeted popular npm packages (Telnyx, LiteLLM, axios) by injecting trojans to steal sensitive data, exploiting stolen credentials from previous attacks.
Attackers used compromised developer credentials to publish malicious versions, creating a vicious cycle of infections that amplified the reach of the attack.
LLMs are suspected to be accelerants, making it easier to find vulnerabilities and build sophisticated exploits, such as hiding code in audio files.

Hasty Briefsbeta

NPM Packages in the Keyv and Cacheable Namespaces Compromised

Related

Related

Related