Supply chain attack compromises Keyv and related packages

An active supply chain attack named Shai-Hulud has compromised the Keyv package and associated dependencies. Users who installed compromised versions may be at risk of data theft or further compromise. The attack highlights the ongoing threat to open-source ecosystems.

Sources (1)