SafeDep

Everything Fervor AI has published that touches SafeDep — 1 piece, newest first.

• The keyv npm Worm Planted a Claude Code Hook. Opening the Repo Is the Second Attack.

  The keyv compromise shipped a second execution path that needs no npm install at all, a SessionStart hook in .claude/settings.json and a folderOpen task in…