Elektrine lite

← Feed

@SocketSecurity@fosstodon.org

2026-04-29 13:37 UTC

🚨 Supply chain attack: SAP CAP and Cloud MTA npm packages compromised. These package versions introduced new preinstall behavior that downloads and runs an external binary: → mbt@1.2.48 → @cap-js/db-service@2.10.1 → @cap-js/postgres@2.2.2 → @cap-js/sqlite@2.2.2 Details: https://socket.dev/blog/sap-cap-npm-packages-supply-chain-attack

Replies (0)

No replies.