Red Hat npm Packages Compromised in Supply-Chain Attack Spreading Credential-Stealing Worm (opens in new tab)

A critical supply-chain attack has compromised 32 official npm packages under the @redhat-cloud-services scope, injecting a credential-stealing worm that runs automatically during package installation. Due to the severity and self-propagating nature of the malware, immediate investigation and credential rotation are required for any environment that installed the affected versions. The attack, dubbed “Miasma: The Spreading […] The post appeared first on .