Skip to content
Mini Shai-Hulud Targets SAP npm Packages With a Bun-Based Secret Stealer
aikido.dev | blog | #supply-chain | #secrets | #malware | #credential-theft | #npm | #sap | #supply-chain-security | #bun | #circleci
Summary
An npm supply chain attack hit SAP's ecosystem: @cap-js and mbt packages gained preinstall hooks running an 11.7 MB Bun-based credential stealer, likely seeded by a token leaked in a CircleCI PR build.
- Published
- Collected