Multiple SAP npm packages were compromised in a supply chain attack designed to steal developer credentials and tokens.
The least exciting page in your browser is also the easiest one to vibe-code.