Shai-Hulud strikes again: CHAINDROP worm hits 400+ npm packages — Elastic Security Labs
On August 4, 2026, Elastic Security Labs identified a new Shai-Hulud campaign targeting the maintainer of keyv, a widely used key-value storage library. The attackers…