How the keyv npm attack reached VS Code and Claude Code
On Tuesday morning a caching library most developers have never thought about became the fastest-moving malware delivery system on the internet. A poisoned release of keyv went up at 09:35 UTC. Within
August 5, 2026 · 5 min read · 1 views
