2026-04-29 13:37 UTC
🚨 Supply chain attack: SAP CAP and Cloud MTA npm packages compromised. These package versions introduced new preinstall behavior that downloads and runs an external binary:
→ mbt@1.2.48
→ @cap-js/db-service@2.10.1
→ @cap-js/postgres@2.2.2
→ @cap-js/sqlite@2.2.2
Details: https://socket.dev/blog/sap-cap-npm-packages-supply-chain-attack
Replies (0)
No replies.