A Mini Shai-Hulud Has Appeared: Obfuscated Bun Runtime Payloads Hit SAP-Related npm Packages
StepSecurity has detected a new npm supply chain attack campaign using preinstall hooks to download the Bun JavaScript runtime and execute an 11 MB obfuscated payload. At least two SAP-ecosystem…
Read the full article2mo ago
You might also wanna read
Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys
Step Security·11h ago
.png)
Introducing Secret Exfiltration Protection for GitHub Actions
Step Security·1d ago
.png)
GitHub Secret Scanning Public Monitoring for Enterprises: Coverage and Gaps
Step Security·2d ago
10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions
Step Security·7d ago
.png)
StepSecurity Maintained Actions Are Now Free for Public Repos
Step Security·7d ago
Secure Registry now tells you which machine pulled a compromised package
Step Security·8d ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.