SlowMist: Keyv/Cacheable Ecosystem Hit by Large-Scale npm Supply Chain Attack, Over 2,000 Malicious Versions Identified
45 minutes ago
SlowMist has published a report detecting a large-scale npm supply chain attack impacting the Keyv/Cacheable ecosystem. Attackers have released over 2,000 malicious package versions in the ecosystem, including keyv@6.0.0. Keyv is a widely used key-value storage abstraction layer supporting backends such as Redis, SQLite, PostgreSQL, and MongoDB, with approximately 127 million weekly downloads, which could trigger widespread downstream supply chain risks. The attack method is highly similar to the previous Shai-Hulud npm worm activity, demonstrating the attackers’ strong automation and propagation capabilities. Potential malicious actions include credential theft, exfiltration of environment variables, leakage of CI/CD secrets, remote payload delivery, and lateral movement via infected development environments. Security teams are advised to immediately identify and remove affected versions, upgrade to verified secure versions, check dependency lock files and build logs, monitor for abnormal outbound connections, and rotate any exposed credentials. If an environment is suspected to be compromised, rebuild it from trusted sources.
A prominent trader: Bitcoin has entered the bottom zone and is accumulating BTC in the range of $54,000 to $64,000.
2 minutes ago
Wall Street is deepening its control over the crypto market, with derivatives and ETFs reshaping the trading structure.
2 minutes ago
Machi sells Bored Ape #5670 for 9 $ETH (89% loss), uses proceeds to fuel 3,450 $ETH position
2 minutes ago
Analysts expect SK Hynix to announce a share repurchase plan soon.
2 minutes ago
Trump on Iran Issue: Results Expected Within 48 Hours
2 minutes ago
Trader Maji sold their BAYC NFT at an 89.4% loss to cut losses, while adding to long positions in ETH.
2 minutes ago
Hot feeds
A trader profits $448K by monitoring #Binance's new listings!
2024.12.13 17:37:29
Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.
2024.12.16 14:48:36
A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.
2024.12.14 10:35:27
When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.
2026.01.31 18:37:29
A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.
2025.01.05 16:05:18
A sniper earned 2,277 $ETH ($8.3M) trading $SHIRO within 18 hours!
2024.12.03 23:09:08
MoreHot Articles

How did I turn $1,000 into $30,000 with smart money?
2024.12.09

10 promising AI Agent cryptos
2024.12.05

The 30-Year-Old Entrepreneur Behind Virtual, a Multi-Million Dollar AI Agent Society
2025.01.22

10 smart traders specializing in MEMEcoin trading on Solana
2024.12.09

A trader lost $73.9K trading memecoins in just 3 minutes — a lesson for us all!
2024.12.13

What is $SPORE? Let us take you through the on-chain records to show you how it works.
2024.12.25

