Product
@cap-js/postgres
- First Reported
- Apr 29, 2026
- Latest Reported
- Apr 29, 2026
Reported Context (1)
- Four confirmed compromised packages, [email protected], @cap-js/[email protected], @cap-js/[email protected], and @cap-js/[email protected], all carry an identical malicious preinstall hook that bootstraps the Bun JavaScript runtime Mini Shai-Hulud Targets SAP-Related npm Packages With Bun Payloads and IDE Persistence
Malware (1)
Threat Actors (1)
MITRE ATT&CK (15)
Vendors (4)
Products (9)
Tools (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
