SAP npm Packages Compromised to Harvest Developer and CI/CD Secrets
A new supply chain attack dubbed “mini Shai Hulud” has compromised four SAP-related npm packages by injecting malicious preinstall scripts that silently execute during dependency installation, targeting developer environments and CI/CD pipelines to steal credentials across GitHub, npm, and major cloud providers. Security researchers at StepSecurity, Aikido Security, SafeDep, Socket, and Wiz identified that malicious […] The post SAP npm Packages Compromised to Harvest Developer and CI/CD Secrets appeared first on Cyber Security News.
Four SAP-related npm packages were compromised through a supply chain attack, injecting malicious scripts that steal developer and CI/CD secrets across GitHub, npm, and major cloud providers.
Read the full article
This is a curated summary. The complete article is available at Cyber Security News.