The SAP Cloud Application Programming Model is a framework for building enterprise cloud applications, and cap‑js/cds-dbs houses the SQL database services needed by that tool. On April 29, 2026, the npm registry received malicious versions of @cap‑js/sqlite 2.2.2, @cap‑js/postgres 2.2.2, and @cap‑js/db‑service 2.10.1. These compromised packages automatically harvest every credential obtainable from the host—such as npm tokens, cloud‑provider keys, SSH keys, and GitHub personal access tokens—and then attempt to self‑propagate. As a result, any system that installed one of these versions should consider all locally stored credentials compromised. The vulnerability is a classic example of supply‑chain attack and is identified as CWE‑506.

Affected products include @cap‑js/db‑service version 2.10.1, @cap‑js/postgres version 2.2.2, and @cap‑js/sqlite version 2.2.2. The recommended safe versions are @cap‑js/db‑service 2.11.0 or newer, @cap‑js/postgres 2.3.0 or newer, and @cap‑js/sqlite 2.4.0 or newer.

The CVSS score of 9.3 denotes high severity. The EPSS score of less than 1% indicates a low probability of exploitation at the moment, but the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is the npm package registry; any installation of the compromised version without integrity checks enables credential theft. Because the vulnerability involves automatic credential harvesting, the risk to exposed systems remains high despite the low current exploitation probability.