Compromise of Official SAP NPM Packages Exposes Credentials (bleepingcomputer.com)

• Malicious code injection within trusted SAP NPM modules
• Credential harvesting targeting enterprise development environments
• Systemic supply chain risks in public package ecosystems

"Threat actors have successfully compromised official SAP NPM packages, injecting malicious code to harvest developer and system credentials. The breach highlights significant vulnerabilities in software supply chains when relying on public repository managers for enterprise software development. Organizations are advised to audit dependencies and rotate credentials immediately."