Sleeper packages in Ruby and Go steal credentials and alter CI workflows, leading to persistent access and data exfiltration.
Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...