Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...
Pack2TheRoot, a high-severity vulnerability in PackageKit, allows users to install packages on Linux systems with root ...
A new vulnerability dubbed Pack2TheRoot could be exploited in the PackageKit daemon to allow local Linux users to install or ...
SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.