Red Hat removes tainted packages after software pipeline compromise (opens in new tab)

According to the company’s preliminary analysis, a compromised GitHub account was used to push the malicious code out to customers, hitting 32 packages downloaded roughly 117,000 times a week.