Frequency
2
occurrences
First Seen
January 26, 2026
Last Seen
July 1, 2026
Related Threat Clusters
-
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…
751 articles · Updated April 29, 2026
Recent Intelligence Reports
- AI Coding Agents Skip Package Verification, and Attackers Are Exploiting It — Techtimes · July 1, 2026
- Hackers can bypass npm’s Shai — Bleepingcomputer · January 26, 2026