← World Watch
Disruptionother · August 7, 2026
Microsoft analyzes a malicious NPM package supply-chain attack involving keyv and ChainDrop
A software supply-chain compromise could disrupt deployment of widely used code dependencies and downstream digital operations.
Source →The trace
How it reaches your house.
Starting from the trigger, we walked the supply graph hop by hop to the goods you buy and the companies you own. Each step is the engine’s reasoning, scored for confidence and cited where a source backs it.
The causal trace for this event is still being written.