Red Hat npm packages compromised to steal developer credentials
BleepingComputer [Unofficial]
June 1, 2026
More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malware, dubbed "Miasma." [...]
Discussion in the ATmosphere