Cybersecurity
SAP npm Packages Hit by Credential-Stealing Malware
On April 30, 2026, SAP-related npm packages were compromised in a supply chain attack dubbed mini Shai-Hulud, injecting credential-stealing malware into dev environments. Details reveal how attackers infiltrated trusted tools used by enterprise developers.



