scrobble.life
#security

New NPM Supply Chain Attack, so I released a new scanner.

Marky@themarkymark (81)20d

image.png

After discovering a new supply chain attack today, I created a quick scanner like my Tanstack scanner that discovers any compromised packages on your system.

You can find it here: https://github.com/officiallymarky/keyvmalwarescanner

There are no dependencies, so no risk of being compromised while scanning.

Just git clone, then run ./scan.sh. That's it.

[mal@serenity keyvscanner]$ ./scan.sh
=== Keyv / Cacheable Supply-Chain IOC Scanner ===
Running on linux x64 at 2026-08-04T16:09:24.531Z
Package indicators: 2234 exact name/version pairs
Indicator source: https://socket.dev/api/public/supply-chain-attacks/keyv-and-cacheable-compromise/packages.csv
Scan roots: /tmp, /opt, /etc, /home/mal, /usr/local


Scanned 3869759 files; skipped 25 unreadable directories.
No known Keyv / Cacheable campaign indicators found.

Super easy, barely an inconvenience.

Comments · 4

  • @valued-customer(75)· 19d

    What does this mean:

    "SyntaxError: Unexpected token { at Module._compile (internal/modules/cjs/loader.js:723:23) at Object.Module._extensions..js (internal/modules/cjs/loader.js:789:10) at Module.load (internal/modules/cjs/loader.js:653:32) at tryModuleLoad (internal/modules/cjs/loader.js:593:12) at Function.Module._load (internal/modules/cjs/loader.js:585:3) at Function.Module.runMain (internal/modules/cjs/loader.js:831:12) at startup (internal/bootstrap/node.js:283:19) at bootstrapNodeJSCore (internal/bootstrap/node.js:623:3)"

    Thanks!

  • @forkyishere(69)· 19d

    I am guesstimating that most of us (on Hive) don't use these things (aka newest 1-year-old packages)... but I am seeing more and more that most of the new AI problems will come with newly released packages... where Enterprise people are trying to sell the idea that everyone needs to update ASAP because of being protected.... and then they get hijacked with this stupidity.

    And this one was just a simple idiot test, with at most 1 year of preparation, due to how easy it might have been to hide it back a year ago, with the first version.

    More will come... especially to uncurated repos.

  • @louis88(80)· 20d

    thx

    image.png

  • @bozz(83)· 20d

    Good stuff, I'll have to check this out on one of my servers.