Mini Shai-Hulud: Dissecting the SAP CAP npm Supply Chain Worm
On April 29, 2026, four SAP CAP npm packages were poisoned with a credential-stealing worm that reached over 1,100 developer repositories within hours. This post consolidates findings from eight...
spbavarva.github.io