Back Ground.News

CISA urges security teams to check for software development compromises

Ground.News • May 30, 2026

The agency warned a wave of attacks targeting credentials and other secrets across critical supply chains.

The Cybersecurity and Infrastructure Security Agency on Thursday warned that hackers targeted software development pipelines in recent weeks and urged security teams to check for potential compromise of their environments. CISA referenced two recent campaigns, including the “Megalodon” supply chain attack and a GitHub compromise through a malicious Nx Console Visual Studio Code extension. The Megalodon […] Thank you for subscribing to our RSS …

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into legitimate packages, which execute during installation to steal sensitive credentials from developers and CI/CD environments. The malware collects data such as GitHub tokens, npm credentials, and cloud secrets, exfiltrating them via public GitHub repositories. Researchers have linked this campaign to the TeamPCP threat actor group, known for similar tactics in previous attacks. At least four SAP-related npm packages have been confirmed as compromised, with the malicious payload being designed to propagate further across the npm ecosystem. The attack is ongoing, and organizations are advised to review their environments for affected packages and rotate any exposed secrets. 545 sources 71

Extracted Entities

CISA urges security teams to check for software development compromises

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Platforms (2)

Tools (2)