Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...
When a new asset goes live, attackers start scanning within minutes. Sprocket Security shows how automated attacks move from ...
Multiple SAP npm packages were compromised in a supply chain attack designed to steal developer credentials and tokens.
Four SAP NPM packages compromised in the Mini Shai-Hulud supply chain attack trigger a Bun runtime to install an information ...
SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding ...