This page may contain stale information. Last updated: 2026-08-04
Overview
Snyk is a developer-focused application security company that publishes vulnerability research and package-compromise analysis for ecosystems including npm.
Recent Developments
- 2026-08-04: Independent tarball analysis of the keyv maintainer compromise; reported 11 malicious releases in the early jaredwray-scoped wave and byte-identical payloads (e.g. [email protected]) (2026-08-04-snyk-keyv-npm-compromise, 2026-08-04-npm-shai-hulud-keyv-supply-chain-attack)