Back to article

Aikido Security's Blog

Red Hat NPM Packages Compromised to Spread a Credential-Stealing Worm (opens in new tab)

Covered by 20 sources including BleepingComputer, This Week In 4n6Discussed on Hacker News and r/linux

Covered in 21 articles

BleepingComputer·

Red Hat npm packages compromised to steal developer credentials

This Week In 4n6·

Week 23 – 2026

infoworld.com·

Infected Red Hat npm packages expose developer credentials

Supply Chain Attack Hits 32 Red Hat NPM Packages

Miasma Malware Hits 32 Red Hat Packages via Compromised GitHub Account

arstechnica.com·

Dozens of Red Hat packages backdoored through its offical NPM channel

Discussed on Hacker News, Hacker News, and r/sysadmin

Red Hat hit by npm supply‑chain attack - here's how to stay safe

Red Hat npm Packages Compromised in Supply Chain Attack

thehackernews.com·

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Snowflake thinks context is king

In other languages

CERT-SE:s veckobrev v.23

Злоумышленники встроили вредоносное ПО в 32 NPM-пакета Red Hat