Overview
keyv is a widely used Node.js key-value storage library (~127M weekly downloads cited) maintained historically by jaredwray, who also maintains the cacheable/flat-cache family.
Recent Developments
- 2026-08-04: Maintainer GitHub account compromised;
[email protected]published with shai-hulud-worm preinstall malware and valid trusted-provenance (2026-08-04-npm-shai-hulud-keyv-supply-chain-attack) - Same wave hit cacheable, flat-cache, file-entry-cache, cache-manager, ecto and then worm-propagated to 1,000+ packages