Security Feed
  1. Archives

Apr 30 2026 The never-ending supply chain attacks worm into SAP npm packages, other dev tools

Source

Mini Shai-Hulud caught spreading credential-stealing malware The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom npm packages, plus the lightning PyPI package.... [...]

Posted by Jessica Lyons on Thu 30 April 2026 in The Register.

Categories

  1. Ars Technica
  2. AWS Security
  3. BleepingComputer
  4. Brian Krebs
  5. Bruce Schneier
  6. GCP Security
  7. Google Project Zero
  8. The Daily Swig
  9. The Guardian
  10. The Register
  11. Threatpost

Tag cloud

  • Security
  • Uncategorized
  • Security, Identity, & Compliance
  • Microsoft
  • Biz & IT
  • Security Blog
  • AI
  • Security & Identity
  • CryptoCurrency
  • Google
  • Announcements
  • Artificial Intelligence
  • Foundational (100)
  • Legal
  • A Little Sunshine
  • Privacy
  • Apple
  • Mobile
  • squid
  • hacking
  • Intermediate (200)
  • LLM
  • Advanced (300)
  • Technical How-to
  • The Coming Storm

Security Feed. Powered by Pelican and m.css. Code is available on GitLab.