Four SAP NPM packages compromised in the Mini Shai-Hulud supply chain attack trigger a Bun runtime to install an information ...
SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...
Cryptopolitan on MSN
Malicious SAP npm packages target crypto wallet data
Four npm packages linked to SAP's Cloud Application Programming Model were hijacked. The hackers added code that steals ...
Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding ...
The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom ...
Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes ...
On Monday, GitHub announced it will acquire NPM, a startup that provides JavaScript tools for 12 million developers. Just last year, GitHub announced a competitive product to NPM. NPM had been rocked ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results