THREATNOIR
SOC & Threat Hunting
Daily briefings + IOCs you can operationalize fast.
CISOs & Leaders
Board-ready context and weekly risk signal.
Learners
Learn from real incidents, not hypotheticals.
Builders
APIs, MCP, and automation-ready threat intel.
Feed
Briefs IOCs Legal
Podcast Weekly Roundup Reviews
Tips & Tricks Awareness Red vs Blue Show Events Resources
Developer
Subscribe
Log in
Back to show
Red vs Blue Show

SAP npm Packages Hijacked to Steal Secrets

Apr 30, 2026 · 1:40

Four official SAP npm packages were compromised with malicious preinstall scripts that harvested developer credentials including AWS tokens, Azure secrets,…

X

Watch next

Critical Exim Flaw Hands Attackers Remote Code Execution
1:40

Critical Exim Flaw Hands Attackers Remote Code Execution

May 14, 2026

Nitrogen Ransomware Hits Foxconn, Claims 8TB Stolen
1:40

Nitrogen Ransomware Hits Foxconn, Claims 8TB Stolen

May 13, 2026

Checkmarx Jenkins Plugin Backdoored With Infostealer
1:40

Checkmarx Jenkins Plugin Backdoored With Infostealer

May 12, 2026

Attackers Tricked DigiCert Into Signing Malware
1:40

Attackers Tricked DigiCert Into Signing Malware

May 11, 2026

JDownloader Site Hacked, Installers Replaced with RAT
1:40

JDownloader Site Hacked, Installers Replaced with RAT

May 10, 2026

Credit Union Breach Exposes One Million Card Numbers
1:40

Credit Union Breach Exposes One Million Card Numbers

May 9, 2026

ShinyHunters Deface Canvas LMS, Millions Exposed
1:40

ShinyHunters Deface Canvas LMS, Millions Exposed

May 8, 2026

PAN-OS Zero-Day Hands Attackers Root on Firewalls
2:00

PAN-OS Zero-Day Hands Attackers Root on Firewalls

May 7, 2026

Copy Fail Gives Root Without Touching Disk
1:40

Copy Fail Gives Root Without Touching Disk

May 6, 2026

THREATNOIR

© 2026 ThreatNoir. All rights reserved.

FeedBriefsIOCsPodcastWeekly RoundupTipsAwareness LessonsResourcesDeveloperLegalContact
System status: nominal