Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding ...
Multiple SAP npm packages were compromised in a supply chain attack designed to steal developer credentials and tokens.