@cap-js/db-service
GHSA-pvw4-cvr4-97p8
npmmalware5/20/2026
Description
Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service)
References (5)
https://github.com/cap-js/cds-dbs/security/advisories/GHSA-pvw4-cvr4-97p8github_advisoryhttps://github.com/cap-js/cds-dbsgithub_advisoryhttps://me.sap.com/notes/3747787github_advisoryhttps://www.sap.com/documents/2026/05/8203a8b9-4d7f-0010-bca6-c68f7e60039b.htmlgithub_advisoryhttps://www.stepsecurity.io/blog/a-mini-shai-hulud-has-appearedgithub_advisory
Details
Ecosystemnpm
Attack Typemalware
Published5/20/2026
Affected Versions
2.10.1
Related CVEs
Aliases
CVE-2026-46421
Quick Actions