> TritonInfoSec News
Home / May 01, 2026 / Story
0
#4 Dark Reading general April 30, 2026 at 21:01 UTC

TeamPCP Hits SAP Packages With 'Mini Shai-Hulud' Attack

By Rob Wright

AI Summary

TeamPCP compromised several npm packages for SAP's cloud application development ecosystem using the 'Mini Shai-Hulud' attack method. The attack introduces preinstall hooks that fetch and execute a Bun binary to bypass security monitoring and steal credentials from developers.

Read full article → https://www.darkreading.com/cloud-security/teampcp…

Relevance score: 90.0/100

# More from May 01

  1. 1
    The most severe Linux threat to surface in years catches the world flat-footed Ars Technica Security
  2. 2
    cPanel’s authentication bypass bug is being exploited in the wild, CISA warns CyberScoop
  3. 3
    PyTorch Lightning Compromised in PyPI Supply Chain Attack to Steal Credentials The Hacker News
  4. 5
    FBI links cybercriminals to sharp surge in cargo theft attacks BleepingComputer
  5. 6
    Hackers earning millions from hijacked cargo, FBI says The Record
  6. 7
    Former incident responders sentenced to 4 years in prison for committing ransomware attacks CyberScoop
  7. 8
    Romanian leader of online swatting ring gets 4 years in prison BleepingComputer
  8. 9
    France investigates 15-year-old over alleged hack of national ID agency The Record
  9. 10
    Police dismantles 9 crypto scam centers, arrests 276 suspects BleepingComputer