Industry Events
EnglishFrançaisEspañol中文العربية
EventsNewsInsightsOrganisers
Services
  • Event MarketingList, promote and grow your events to a global B2B audience.
  • Press ReleaseDistribute official announcements to industry professionals worldwide.
  • Speaker & SME PromotionShowcase expertise, get booked for keynotes, panels and masterclasses.
Subscribe
Speaker Sign InList Your Free Event
Industry Events

The world's most trusted B2B event discovery platform. Connecting industry professionals with the conferences, expos and summits that matter.

Explore & Services
  • Industry Events
  • News
  • Event Organisers
  • About Us
  • Our Services
  • Premium Organiser
  • Event Pro
  • Become a Speaker
  • Subscribe
Legal & Privacy
  • Terms
  • Privacy

© 2026 Industry Events Worldwide. All rights reserved.

VF103.74.
Industry Events

The world's most trusted B2B event discovery platform. Connecting industry professionals with the conferences, expos and summits that matter.

  • Industry Events
  • News
  • Event Organisers
  • About Us
  • Our Services
  • Premium Organiser
  • Event Pro
  • Become a Speaker
  • Subscribe
  • Terms
  • Privacy

© 2026 Industry Events Worldwide. All rights reserved.

VF103.74.
  • Events
  • News
  • Insights
Industry Events
EnglishFrançaisEspañol中文العربية
EventsNewsInsightsOrganisers
Services
  • Event MarketingList, promote and grow your events to a global B2B audience.
  • Press ReleaseDistribute official announcements to industry professionals worldwide.
  • Speaker & SME PromotionShowcase expertise, get booked for keynotes, panels and masterclasses.
Subscribe
Speaker Sign InList Your Free Event
  1. Home
  2. News
  3. Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker News

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

A credential-stealing npm worm that first appeared in keyv@6.0.0 spread beyond the Keyv and Cacheable namespaces into hundreds of packages across multiple organizations on August 4, 2026. SafeDep verified 353 poisoned versions across 79 package names in the npm registry. Its monitoring put the wider footprint at 442 versions across 353 names, while Aikido later reported at least 868 packages

Continue with the complete report on the publisher’s website.

Read full article at The Hacker News
T

By The Hacker News

4 August 2026|1 min read
Share
Cybersecurity, Cryptography & Digital Trust
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
Share
← Back to IE News

Got news to share with the events industry?

Submit a press release or story tip and reach thousands of event professionals.

Get in touch→

More in Cybersecurity, Cryptography & Digital Trust

  • An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.

    The Hacker News

    An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.

    18 September 2026
  • Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

    The Hacker News

    Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

    18 September 2026
  • SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

    The Hacker News

    SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

    19 September 2026
  • Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

    The Hacker News

    Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

    18 September 2026
  • Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

    The Hacker News

    Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

    18 September 2026
  • Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up

    The Hacker News

    Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up

    19 September 2026

Related Insights

  • Smart agriculture and food technology

    Sulfuric Acid: The Hidden Chemical Connecting Food, Metals, Clean Energy and Industrial Power

    Sulfuric acid is the hidden chemical linking energy, fertiliser, food security, copper, nickel, batteries, semiconductors and water. As sulfur supply tightens, executives must track the industrial connections shaping clean technology, agriculture and global resilience.

    17 Sept 202612 min read
  • The Dollar System Is Being Exposed as the World’s Financial Chokepoint — and Countries Are Learning to Route Around It

    The dollar still dominates global finance. But sanctions, frozen reserves, tariffs, gold repatriation, BRICS payment plans and rising geopolitical tension are forcing governments to ask a harder question: how much national security should depend on another country’s financial system?

    12 Sept 202617 min read
  • Clean energy and grid modernization

    Gas, Fertiliser and Food Security: Why Clean Energy Strategy Must Connect the Dots

    Natural gas is not only an energy commodity. It is a feedstock for fertiliser, a foundation for food production and a strategic link between energy security, agriculture, industry and climate technology.

    11 Sept 20267 min read
Browse all insights →

Related Events

  • Project Finance & Project Financial Modelling - Oct 2026

    19 Oct 2025
  • IFEX Kunming International Flowers & Plants Expo

    18 Sept 2026
    Shanghai, China
  • Design Democracy

    18 Sept 2026
    India
  • Gulf Steel Expo 2026

    20 Sept 2026
    Dammam, Saudi Arabia
Browse All Events→

More From The Newsroom

  • Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

    Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

    18 September 2026
  • Cisco Zero-Day Highlights API Endpoint Authentication Issues

    Cisco Zero-Day Highlights API Endpoint Authentication Issues

    18 September 2026
  • CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

    CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

    19 September 2026
  • Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

    Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

    18 September 2026
Industry Events

The world's most trusted B2B event discovery platform. Connecting industry professionals with the conferences, expos and summits that matter.

Explore & Services
  • Industry Events
  • News
  • Event Organisers
  • About Us
  • Our Services
  • Premium Organiser
  • Event Pro
  • Become a Speaker
  • Subscribe
Legal & Privacy
  • Terms
  • Privacy

© 2026 Industry Events Worldwide. All rights reserved.

VF103.74.
Industry Events

The world's most trusted B2B event discovery platform. Connecting industry professionals with the conferences, expos and summits that matter.

  • Industry Events
  • News
  • Event Organisers
  • About Us
  • Our Services
  • Premium Organiser
  • Event Pro
  • Become a Speaker
  • Subscribe
  • Terms
  • Privacy

© 2026 Industry Events Worldwide. All rights reserved.

VF103.74.