AI Summary

A recent supply chain attack has compromised several npm packages related to SAP, allowing attackers to steal credentials. The campaign, dubbed "mini Shai-Hulud," has targeted packages associated with SAP's JavaScript and cloud applications. Researchers from multiple firms, including Aikido Security, SafeDep, Socket, StepSecurity, and Wiz, have reported the issue. The compromised packages may pose a risk to users who have installed them, potentially allowing attackers to access sensitive information.

AI summaries can be wrong sometimes—always verify important details using the source article.