CYBERSECURITY
FEATURED ANALYSIS
"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages
SOURCE
Blog RSS Feed | Snyk
DATE
READ
1 min read
A new npm supply chain attack self-branded “Mini Shai-Hulud” compromised four SAP-ecosystem packages on April 29, 2026. Snyk has live advisories. Here’s the technical breakdown, IOCs, and what to do.
A new npm supply chain attack self-branded “Mini Shai-Hulud” compromised four SAP-ecosystem packages on April 29, 2026. Snyk has live advisories. Here’s the technical breakdown, IOCs, and what to do.