SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
Multiple SAP npm packages were compromised in a supply chain attack designed to steal developer credentials and tokens.
Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results