Shai-Hulud worm poisons keyv and 434 npm packages with 2B monthly installs

Attackers hijacked the keyv maintainer's GitHub account and published credential-stealing versions of keyv 6.0.0, flat-cache 6.1.24, file-entry-cache 11.1.6, and the rest of the cacheable family. The worm has since reached 434+ packages and over 2 billion monthly installs, stealing npm tokens, GitHub PATs, AWS keys, and Vault secrets through a preinstall hook before republishing itself. keyv is a transitive dependency across much of Node, and the poisoned releases carry valid GitHub Actions provenance — only lockfile triage against the advisory's version list and CI token rotation catch it.

Source: aikido.dev ↗

The poisoned versions were published to npm with valid provenance signed by GitHub Actions.

aikido.dev

Why this matters

→ 2B monthly npm installs compromised; credentials stolen from CI/prod systems
→ Worm self-replicates via stolen tokens across 434+ packages
→ Valid GitHub Actions provenance defeats common supply-chain detection

Supply chain worm spreads across npm