The Shai-Hulud npm worm didn't fake its security check — it earned a legitimate one

VentureBeat
Aug 5, 2026, 12:12 pm322 ptsTop
An attacker on Tuesday took over the GitHub account of the developer who maintains keyv, a small key-value storage library that npm serves roughly 127 million times a week. Within hours, poisoned versions of keyv and its sibling caching packages were live on npm, carrying a credential-stealing worm. By midday,…

Read Article Share
Share Article
- email
- x.com
- facebook
- pocket
- reddit
- tumblr
- linkedin
- pinterest

Trending Today on Tech News Tube

Intel requests FCC waiver from US foreign robot ban, citing impact on US chipmaking

Digitimes

Intel requests FCC waiver from US foreign robot ban, citing impact on US chipmaking 129

'Turn any tank into your next UGV': France's Foreign Legion may get thousands of XXL robot mules built from retired tanks — though the demo inconveniently sits on one of only two AMX-32s ever made

TechRadar

'Turn any tank into your next UGV': France's Foreign Legion may get thousands of XXL robot mules built from retired tanks — though the demo inconveniently sits on one of only two AMX-32s ever made 128

GTA 6 devs rode in a helicopter over a Beyoncé concert and met 'colorful characters' who revealed their crimes while researching Miami — 'As soon as they know where you're from, they just want to tell you every crime they or their friends have ever done'

TechRadar

GTA 6 devs rode in a helicopter over a Beyoncé concert and met 'colorful characters' who revealed their crimes while researching Miami — 'As soon as they know where you're from, they just want to tell you every crime they or their friends have ever done' 126

OpenAI says its models can help banks migrate from old COBOL programs

Engadget

OpenAI says its models can help banks migrate from old COBOL programs 117

Anthropic pitches AI safety bill that may block a model if 50+ people could be killed

TechCrunch

Anthropic pitches AI safety bill that may block a model if 50+ people could be killed 116

Rockstar 'spent months, if not years, trying a million different things that would replace the weapon wheel' to make loadouts 'more realistic' in GTA 6

TechRadar

Rockstar 'spent months, if not years, trying a million different things that would replace the weapon wheel' to make loadouts 'more realistic' in GTA 6 115

Hatch Sleep Clock Review: A Contactless Sleep Tracker (2026)

Wired

Hatch Sleep Clock Review: A Contactless Sleep Tracker (2026) 114

Vodafone, Orange, and others eye European Starlink alternative

TechRadar

Vodafone, Orange, and others eye European Starlink alternative 108

About Tech News Tube

Tech News Tube is a real time news feed of the latest technology news headlines.

Follow all of the top tech sites in one place, on the web or your mobile device.

Featured

Hugging Face CEO warns that Netflix’s…

Hugging Face CEO warns that Netflix’s OpenAI hack documentary isn’t accurate

Google’s more personalized Gemini AI…

Google’s more personalized Gemini AI is heading to your car

Judge tosses sexual abuse lawsuit from…

Judge tosses sexual abuse lawsuit from Sam Altman's sister

Google is bringing a more personal…

Google is bringing a more personal version of its Gemini AI assistant to your…

Google has joined Amazon in attacking…

Google has joined Amazon in attacking Nvidia’s stronghold with AI app developers

DeepSeek AI tools banned from US…

DeepSeek AI tools banned from US government agency systems as rift with China…

Ex-Nvidia-turned-VC Amulya Vishwanath:…

Ex-Nvidia-turned-VC Amulya Vishwanath: ‘Physical AI is in it’s LEGO era’

This week's 12 best laptop deals in the…

This week's 12 best laptop deals in the US and the UK — my top picks from…

US Bans DeepSeek From Government Use

US Bans DeepSeek From Government Use

TikTok staff raised child safety…

TikTok staff raised child safety concerns, but executives reportedly failed to…