Executive brief
A supply chain attack compromised several SAP-related software development packages by injecting malicious code into their installation process. This malware, known as 'Shai-Hulud', is designed to steal sensitive credentials such as cloud provider keys, SSH keys, and GitHub access tokens from developer machines and automated build systems. If an affected version was installed, attackers may have gained full access to the victim's development environment and cloud infrastructure, potentially leading to data breaches or further unauthorized software modifications.
Technical details
This is a supply chain compromise involving the injection of malicious 'preinstall' hooks into npm packages. The malware, identified as a variant of the 'Shai-Hulud' worm, downloads a Bun runtime to execute a heavily obfuscated 11.6 MB payload. The payload performs credential harvesting (npm tokens, SSH keys, cloud credentials) and achieves persistence by modifying IDE configurations (.vscode/tasks.json) and AI coding agent settings (.claude/settings.json). The attack utilized both stolen npm automation tokens and the abuse of OIDC trusted publishing via compromised GitHub accounts. Affected versions include @cap-js/sqlite@2.2.2, @cap-js/postgres@2.2.2, @cap-js/db-service@2.10.1, and mbt@1.2.48. Users must upgrade to patched versions and rotate all potentially exposed credentials.
Affected products
- SAP @cap-js/sqlite 2.2.2
- SAP @cap-js/postgres 2.2.2
- SAP @cap-js/db-service 2.10.1
- SAP mbt 1.2.48
Timeline
- 2026-04-29: exploited: Malicious versions published to npm registry.
- 2026-05-14: advisory: GitHub Security Advisory published.
- 2026-07-15: disclosed: CVE-2026-46421 published to NVD.