Skip to content
Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware
wiz.io | blog | #cloud | #supply-chain | #kubernetes | #malware | #credential-theft | #npm | #sap | #teampcp
Summary
TeamPCP's 'Mini Shai Hulud' campaign trojanized SAP-related npm packages with preinstall scripts, later hitting intercom-client and lightning, harvesting Kubernetes, Vault, and cloud credentials.
- Published
- Collected