Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
A credential-stealing npm worm that first appeared in keyv@6.0.0 has spread beyond the Keyv and Cacheable namespaces into hundreds of packages across…
Tag: Semgrep
Semgrep: Static Analysis Security Tool
Semgrep is a static analysis security tool that documented similar Claude Code and VS Code hooks in an April compromise of the…