Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm…

Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm - Slashdot

Aikido Security says more than 30 official @redhat-cloud-services npm packages were compromised with a credential-stealing worm called "Miasma," a variant resembling the open-sourced Mini Shai-Hulud supply-chain malware. "The packages were published via GitHub Actions OIDC, indicating the CI/CD pipe...