keyv

Keyv is a small key-value storage library for JavaScript, used by npm to serve roughly 127 million times a week. It provides a simple interface for storing and retrieving data by key.

Why it’s in the news: It is in the news because its developer's GitHub account was compromised, leading to malicious versions of the library being published to npm.

Latest on keyv

• An attacker on Tuesday took over the GitHub account of the developer who maintains keyv, a small key-value storage library that npm serves roughly 127 million times a week. Within hours, poisoned versions of keyv and its sibling caching packages were live on npm, carrying a credential-stealing worm.

Connections

1 entities linked to keyv across the news graph.