Shai-Hulud Just Hit npm Again, Keyv and TanStack Packages Compromised
An active supply chain attack called Shai-Hulud just compromised Keyv and dozens of TanStack npm packages. What got poisoned, how to check if you're affected, and what to do right now.
4 min read