vx-underground @vxunderground · Twitter · 2026-08-04 16:41 UTC Aikido @aikidosecurity · Twitter · 2026-08-04 10:16 UTC ‼️ The popular npm package keyv is being actively compromised (127 million weekly downloads). The attacker is still pushing malware across packages right now. Developing story.