Supply Chain Attack Targets SAP NPM Packages, Bypasses Security
Why it matters: Indian organizations leveraging SAP products and NPM packages must enhance their supply chain security measures to detect and prevent such stealthy intrusions.
A new supply chain attack, dubbed Mini Shai-Hulud, is actively targeting SAP NPM packages. This sophisticated attack utilizes a preinstall hook to fetch and execute a Bun binary, effectively bypassing existing security monitoring solutions. The method allows for unauthorized code execution, posing a significant risk to affected systems.
Source: Security Week