SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
Four SAP NPM packages compromised in the Mini Shai-Hulud supply chain attack trigger a Bun runtime to install an information ...
Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding ...
Bitwarden CLI 2026.4.0 was compromised via GitHub Actions in Checkmarx campaign, exposing secrets and distributing malicious ...
The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.
Yet another npm supply-chain attack is worming its way through compromised packages, stealing secrets and sensitive data as ...
Attackers infected all versions with the same credential-stealing malware that, on Wednesday, poisoned multiple npm packages ...
Cryptopolitan on MSN
Crypto devs face new threat from Claude-based malware
A threat group planted a malicious npm package in a crypto trading project through an AI-generated commit by Anthropic's ...
Dozens of npm libraries, including a color library with over 2 million downloads a week, have been replaced with novel self-replicating credential-stealing code in yet another wave of a supply chain ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results