keyv

Keyv is a small key-value storage library for JavaScript, designed to be used as a caching layer in applications. It is served via npm and is integrated into numerous projects.

Why it’s in the news: It is in the news because its maintainer's GitHub account was compromised, leading to malicious versions of the library being published to npm to steal credentials.

Latest on keyv

• An attacker on Tuesday took over the GitHub account of the developer who maintains keyv, a small key-value storage library that npm serves roughly 127 million times a week. Within hours, poisoned versions of keyv and its sibling caching packages were live on npm, carrying a credential-stealing worm.

Connections

1 entities linked to keyv across the news graph.