Supply chain attack: Several SAP software projects compromised - | Golem.de:
Attackers have injected malicious code into SAP's NPM packages to steal access ...
golem.de/news/supply-chain-angriff-mehrere-softwareprojekte-von-sap-kompromittiert-2604-208187.html
Similar to This
Previous
Critical security vulnerability: SAP systems are being attacked - | Golem.de: Attackers can compromise SAP Commerce Cloud instances via a critical security ...
golem.de/news/schadcode-im-anmarsch-sap-systeme-werden-ueber-kritische-luecke-attackiert-2608-211987.html
Worm in the NPM ecosystem: Several Red Hat software packages compromised - | Golem.de
golem.de/news/wurm-im-npm-oekosystem-mehrere-softwarepakete-von-red-hat-kompromittiert-2606-209295.html
dlvr.it May 19
Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise
theregister.com/cyber-crime/2026/05/19/shai-hulud-keeps-burrowing-314-npm-packages-infected-after-another-account-compromise/5242601
dlvr.it May 15
OpenAI caught in TanStack npm supply chain chaos after employee devices compromised
theregister.com/security/2026/05/15/openai-caught-in-tanstack-npm-supply-chain-chaos-after-employee-devices-compromised/5241019
Supply chain attack: Hundreds of NPM and PyPI packages compromised - | Golem.de: The hacker group TeamPCP is once again digging through countless NPM and Python ...
golem.de/news/supply-chain-angriff-hunderte-von-npm-und-pypi-paketen-kompromittiert-2605-208562.html
Supply chain attack on password manager: Bitwarden’s NPM package compromised - Golem.de
golem.de/news/supply-chain-angriff-auf-passwortmanager-npm-paket-von-bitwarden-kompromittiert-2604-207974.html
NPM packages download malware: Popular HTTP client Axios compromised - | Golem.de
golem.de/news/npm-pakete-laden-malware-nach-populaerer-http-client-axios-kompromittiert-2603-207094.html
GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...
bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/
Attackers inject malware into widely used open-source packages: A massive supply chain attack has shaken the JavaScript community: Attackers have succeeded in ...
elektronikpraxis.de/angreifer-schleusen-malware-in-weit-verbreitete-open-source-pakete-a-7121c4892863a6b729d4c72b7a8cb733/
:quality(90)/p7i.vogel.de/wcms/30/e2/30e2cdc3c5364e3d0cce5c09b811af07/0126664093v2.jpeg)
Hackers steal 1.8 terabytes of data from PC peripheral vendor Logitech — firm says zero-day vulnerability to blame, no sensitive information stolen
tomshardware.com/tech-industry/hackers-steal-1-8tb-of-data-from-pc-peripheral-vendor-logitech-firm-says-zero-day-vulnerability-to-blame-no-sensitive-information-stolen
New major npm attack: Hundreds of packages infected with self-replicating malware
heise.de/news/Neuer-NPM-Grossangriff-Selbst-vermehrende-Malware-infiziert-Dutzende-Pakete-10651111.html
Malicious code injected: Major NPM attack affects one in ten cloud environments - | Golem.de
golem.de/news/schadcode-eingeschleust-grosse-npm-attacke-betrifft-jede-zehnte-cloud-umgebung-2509-199990.html
Supply chain attack: NPM packages with billions of downloads compromised - | Golem.de
golem.de/news/supply-chain-angriff-npm-pakete-mit-milliarden-von-downloads-kompromittiert-2509-199901.html
Major attack on node.js: A cryptocurrency thief used spearphishing to gain access to the npm account of a diligent developer. Node ...
heise.de/news/Grosser-Angriff-auf-node-js-10637088.html
Developers should act: Malware injected into prominent JavaScript projects - | Golem.de
golem.de/news/entwickler-sollten-handeln-malware-in-prominente-javascript-projekte-eingeschleust-2507-198445.html
Next