Morning Overview on MSN

Malicious SAP npm packages with 500,000 weekly downloads were stealing developer passwords and cloud secrets for days

For a few critical days at the end of April 2026, thousands of developers building SAP integrations unknowingly handed their ...
WeLiveSecurity

A rigged game: ScarCruft compromises gaming platform in a supply-chain attack

ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via ...