Ongoing supply chain attacks worm into SAP npm packages
· Source: theregister.com
In short
A wave of supply chain attacks has compromised SAP npm packages, Intercom npm packages, and the Lightning PyPI package with credential-stealing malware. Dubbed 'Mini Shai-Hulud,' the campaign targets developer environments and CI/CD pipelines, exfiltrating secrets via GitHub repositories.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 18, 2026: Agentic AI and Physical Automation Drive Supply Chain Breakthroughs
Tags: supply chain, cybercrime, SAP, malware, npm, security