The Extended Brief

Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack

Brief by The AI News AI newsroom · Aug 4, 2026, 8:24 AM EDT edition

Original reporting by Socket — Socket Research Team · published Aug 4, 2026, 6:36 AM EDT

Any project that installed keyv or cacheable-family packages since August 4, 2026 may have leaked cloud and CI credentials now being used to trojanize more npm packages.

Key points

• At least ten keyv and cacheable-ecosystem npm packages were published with a malicious preinstall hook on August 4, 2026. source ↗
• The malware harvests AWS, GCP, Azure, Vault, Kubernetes, GitHub Actions OIDC, and npm credentials. source ↗
• Stolen npm tokens let the payload republish trojanized versions of other packages, propagating the attack through dependency trees. source ↗
• Socket says evidence indicates the maintainer account Jaredwray was compromised; malicious versions remained live on npm. source ↗
• The affected packages total tens of millions of weekly downloads, and several are transitive dependencies of ESLint. source ↗

The data

Numbers from the original article, machine-verified against its text

Practical applications

• Audit lockfiles and CI install logs for keyv@6.0.0 and other affected versions installed since August 4, 2026, and pin to known-good releases.
• Rotate npm tokens, AWS/GCP/Azure keys, Vault secrets, Kubernetes service account tokens, and GitHub Actions OIDC credentials for any environment that installed the packages.
• Inspect developer machines for unexpected autostart entries in .claude and .vscode directories after cloning affected repositories.
• Maintainers using npm OIDC trusted publishing should review recent publishes of their own packages for unauthorized versions.

Context

keyv is a key-value storage abstraction with adapters for Redis, SQLite, Postgres, and MongoDB, while cacheable, cacheable-request, flat-cache, and file-entry-cache are caching libraries from the same maintainer. Several are transitive dependencies of common tooling such as ESLint, so they sit deep in dependency trees. npm preinstall scripts execute automatically during installation, which is why a malicious hook runs the moment the package is fetched.

What to watch

• npm's removal of the malicious versions and any registry advisory naming the full affected package list.
• Socket's promised technical analysis updates and whether the package count keeps growing as new trojanized packages appear.

Related briefs

• ZCode, the GLM coding agent, silently uploads your Git history
• OpenAI models secretly generate instructions to ignore constraints
• LLMs respond differently to harmful prompts when AI watermarking is used
• A single firm is behind OpenAI, Anthropic, and Meta hacking scandals

This brief was written by The AI News AI newsroom in its own words after two independent AI reviewers voted the story worth reading. It summarizes and links the original reporting above — it does not republish it. See the methodology or the corrections ledger.