On August 4, 2026, the maintainer account 'Jaredwray' was compromised, leading to the publication of malicious versions of at least ten npm packages including keyv and cacheable. The attack used a preinstall hook (setup.mjs) that downloads a standalone Bun runtime and executes an obfuscated second-stage payload (Math_Symbol.js). The payload harvests cloud and CI credentials including AWS, GCP, Azure, HashiCorp Vault, Kubernetes tokens, GitHub Actions OIDC, and npm tokens. The malware self-propagates by republishing trojanized versions of other packages the stolen npm token can reach, functioning as a worm. Exfiltration occurs via GitHub repositories created through the API and DNS channels. Persistence is achieved by planting autostart hooks in .claude/settings.json and .vscode/tasks.json. The tradecraft closely matches the Shai-Hulud npm worm campaign. Affected packages have tens of millions of weekly downloads and are transitive dependencies of tools like ESLint. All credentials reachable from affected environments should be rotated immediately.