Keyv library compromised and @qlik/embed-runtime1.6.4

[Romain969685]

Hello everyone,

We have just learnt that, since yesterday, the Keyv library has been compromised and that Qlik may potentially be affected.

https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack

In particular, @qlik/embed-runtime1.6.4

Do you know if Qlik has updated its packages? Is there anything we need to do?
What are your recommendations?

We use Qlik Embed via QlikCloud to provide charts in our web applications.

Thanks in advance.

Kind regards,

Translated with DeepL.com (free version)