Malicious Keyv npm release threatens thousands of JavaScript projects

Upwind reports a malicious Keyv release that threatened thousands of JavaScript projects, with the attack poisoning packages and planting hooks.

• Upwind first to report malicious Keyv release that threatened thousands of JavaScript projects
• Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
• Keyv and friends compromised in active Shai-Hulud supply chain attack