Red Hat npm Supply Chain Attack: Miasma Hits @redhat-cloud-services
Date Observed: June 1, 2026Ecosystem: npm @redhat-cloud-services Targets: CI/CD pipelines and developer workstations consuming @redhat-cloud-services packages Attack Type: CI/CD pipeline compromise; preinstall hook injection; multi-stage credential theft; worm propagation Impact: At least 32 @redhat-cloud-services packages / 96 malicious versions were backdoored; multi-cloud credential theft (GitHub Actions, AWS, GCP, Azure, Kubernetes, HashiCorp Vault, CircleCI); downstream propagation capability; ~80,000 cumulative […]