Advisory
Ongoing npm Supply Chain Attack Affecting Keyv and Related Packages ("Shai-Hulud" Worm)
6 August 2026
Security researchers have identified an active software supply chain attack involving malicious versions of Keyv and related npm packages. The Shai-Hulud malware steals developer credentials and spreads by compromising additional packages. Organisations using Node.js should immediately review their dependencies and treat credentials on affected systems as potentially compromised.
Background
Security researchers observed an active supply chain campaign involving ‘ChainDrop’, a self-propagating malware variant from the Shai-Hulud malware family. The campaign has compromised over 1,300 package versions on the npm registry, representing a combined 2 billion monthly downloads. Affected packages include widely used caching libraries such as keyv, cacheable, flat-cache, and file-entry-cache and the campaign has propagated into the software supply chains of several organisations.
This advisory provides a list of known compromised packages, along with corresponding security updates that include mitigation measures and indicators of compromise. Organisations using affected components are advised to review the corresponding security updates and assess their environments for potential compromise.
Affected Product Versions:
Notable compromised packages are listed as follows:
Table caption
Affected Software Ecosystem | Affected Artifacts | Affected Versions |
npm | keyv | 6.0.0 |
flat-cache | 6.1.24 | |
file-entry-cache | 11.1.6 | |
cacheable-request | 13.0.20 | |
cacheable | 2.5.1 | |
@cacheable/memory | 2.2.1 | |
cache-manager | 7.2.10 | |
@cacheable/node-cache | 3.1.2 | |
@cacheable/utils | 2.5.1 | |
@cacheable/net | 2.1.1 | |
ecto | 5.0.1 |
For the full list of compromised packages, please refer to https://socket.dev/supply-chain-attacks/keyv-and-cacheable-compromise.
Indicators of Compromise (IOCs)
The list of Indicators of Compromise (IOCs) associated with the activities is as follows:
Table caption
S/N | IOC | Type | Description |
|---|---|---|---|
1 | npm-cache[.]com | Domain | Exfil domain |
2 | https[:]//npm-cache[.]com[:]443/router | Domain | Exfiltration Endpoint |
3 | eth-mainnet.nodereal[.]io | Domain | ETH RPC |
4 | go.getblock[.]io | Domain | ETH RPC |
5 | eth.llamarpc[.]com | Domain | ETH RPC |
6 | pypi-get[.]com | Domain | Network IOC |
7 | js-mirror[.]com | Domain | Network IOC |
8 | 54dc7ea54a1317cca0e890a2770630cf7fa6c97813e0cb9d2caa93012b350668 | Hash | setup.mjs |
9 | fd3ca4007b225fdf8de7af4345a19179d5efa8c4bb9205f88cda806e5684b1eb | Hash | setup.mjs |
10 | 9fc2570b7cef51c1b8df116d144d11ff4096357be7d2c4c6367cfc2509cf1bcc | Hash | Math_Symbol.js and math_init.js |
Recommended Actions
Identify and remove the affected package versions from development, build, and CI/CD environments.
Treat affected systems as potentially compromised and rebuild them if the malicious packages were installed.
Rotate exposed credentials, including cloud credentials, GitHub tokens, SSH keys, Kubernetes configurations, Terraform credentials, and other developer secrets.
Review cloud and source code environments for unauthorized access or suspicious activity following package installation.
Monitor for the published IOCs, including the identified domains, file artifacts, and other indicators associated with the campaign.
Strengthen software supply chain defenses by enabling dependency allowlisting, package integrity verification, and provenance controls where available.
Monitor for activity involving GitHub repository with a description containing "Shai-Hulud: Here We Go Again".
Refer to the CSA Advisory on Securing the Software Supply Chain and Development Workflows for additional best practices on securing software supply chains and development workflows: https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-003/
References
https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack
https://www.wiz.io/blog/keyv-and-cacheable-npm-supply-chain-attack