Keyv and friends compromised in active Shai-Hulud supply chain attack