🧰 cacheable

The items that name it 11

• Supply Chain Zero Days: Closing the Gap Between Publication and Detection
  articleas classification.key entities2026-10-19
• The OpenSourceMalware Show #24
  talkas classification.key entities2026-10-09
• The OpenSourceMalware Show #16
  talkas affected products2026-08-08It is written here as Cacheable (npm package).

  Maintained by Jared Wray; compromised alongside Keyv in the same worm incident

• New npm Worm Hits 400+ Packages Including Keyv, Cachable
  writeupas classification.key entities2026-08-05
• NPM Malware Compromises keyv and cacheable with 500M+ Weekly Downloads and Spreads to Hundreds of Packages | Blog | Endor Labs
  advisoryas classification.key entities2026-08-04
• keyv and cacheable npm Package Hijacked in Supply Chain Attack
  writeupas affected products2026-08-04It is written here as cacheable (npm package ecosystem).

  Part of the compromised keyv/cacheable ecosystem

• Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks
  writeupas affected products2026-08-04

  Published 10:10:44 UTC, malicious

• 'ChainDrop' worm compromises hundreds of popular npm packages
  writeupas classification.key entities2026-08-04
• OpenSourceMalware Blog
  articleas classification.key entities2026-07-18
• Open Source Malware Podcast — episodes
  otheras classification.key entities2026-05-22
• Shai-Hulud-2.0-Detector — npm supply-chain compromise scanner
  repoas affected products

  compromised via same maintainer account (ChainDrop wave)