> The never-ending supply chain attacks worm into SAP npm packages, other dev tools
[AUTHOR: Jessica Lyons]
[DATE: 30/04/2026 23:21]
[LANGUAGE: EN]
Mini Shai-Hulud caught spreading credential-stealing malware The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom npm packages, plus the lightning PyPI package.…