More malicious GitHub repos found. Why vibecoding can give you (and your users) worms.
Worm compromises hundreds of popular npm packages | Datadog Security Labs
On August 4, 2026, several popular npm packages, including 'keyv', were compromised to deliver malware.
securitylabs.datadoghq.com