Malicious SAP npm Packages Exploit CI Pipelines to Hijack Developer Credentials

This supply chain attack demonstrates a sophisticated level of manipulation by hijacking SAP's CI/CD pipeline to bypass standard security checks and spread via developer environments. It highlights the critical need for verifying SLSA attestations and monitoring automated publishing workflows to prevent credential theft across major cloud platforms.