---
id: 6779
title: "keyv and cacheable npm Package Hijacked in Supply Chain Attack"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/keyv-and-cacheable-npm-supply-chain-attack"
published_at: "2026-08-04T11:25:22Z"
tags: ["ai-security", "supply-chain", "malware", "credential-theft", "npm", "shai-hulud", "keyv", "wiz"]
phying_url: "https://phying.com/item/6779"
lang: en
---

# keyv and cacheable npm Package Hijacked in Supply Chain Attack

## Summary

Wiz: keyv/cacheable packages were hijacked via a maintainer account; a Mini Shai-Hulud descendant hit 400+ packages, stealing credentials, AI configs and wallets; C2 via an Ethereum contract.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2026-08-04T11:25:22Z
- **Original:** https://www.wiz.io/blog/keyv-and-cacheable-npm-supply-chain-attack
- **Phying News:** https://phying.com/item/6779