SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack

Source: The Hacker News

Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP‑related npm packages with credential‑stealing malware.

According to reports from Aikido Security, Onapsis, OX Security, SafeDep, Socket, StepSecurity, and Google‑owned Wiz, the campaign—calling itself the mini Shai‑Hulud—has affected the following packages associated with SAP’s.