Storia in 10 fonti

Infected Red Hat npm packages expose developer credentials

Researchers have uncovered a new Shai-Hulud malware variant targeting Red Hat-related npm packages, spreading through software publishing ecosystems for persistence and credential theft.

Raccontata da

Confronto fonti

6 prospettive sulla stessa storia

AI · summaries

infoworld.comStai leggendo1 mesi fa

Infected Red Hat npm packages expose developer credentials

Researchers have uncovered a new Shai-Hulud malware variant targeting Red Hat-related npm packages, spreading through software publishing ecosystems for persistence and credential theft.

originale

bleepingcomputer.com1 mesi fa

Red Hat npm packages compromised to steal developer credentials

More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malware, dubbed "Miasma."

Leggi questa versione → originale

thehackernews.com1 mesi fa

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Miasma compromised @redhat-cloud-services npm packages, harvesting credentials and persisting in development tools. The worm escalates privileges, steals cloud identities, and propagates via GitHub—threatening CI/CD integrity and supply chains.

Leggi questa versione → originale

arstechnica.com1 mesi fa

Dozens of Red Hat packages backdoored through its offical NPM channel

Red Hat NPM account (@redhat-cloud-services) compromised; >30 packages execute install-time malware stealing GitHub/npm/K8s/Vault secrets. The worm spreads to other accounts via infected machines, making any installation a supply-chain risk regardless of usage.

Leggi questa versione → originale

securityweek.com1 mesi fa

Supply Chain Attack Hits 32 Red Hat NPM Packages

32 Red Hat NPM packages compromised in 72-second attack; malware steals GitHub/npm tokens, cloud credentials impacting ~10M downloads. Supply chain attack escalation; immediate credential rotation and dependency audits critical for all JavaScript-using teams.

Leggi questa versione → originale

theregister.com1 mesi fa

Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week

TeamPCP? Or copycat malware dev?

Leggi questa versione → originale

Timeline cronologica

lunedì 1 giugno 2026·dev.to
31 paquetes npm de Red Hat comprometidos roban credenciales de nube
StepSecurity detectó 31 paquetes del scope @redhat-cloud-services en npm publicados con código malicioso que roba credenciales de nube. Qué pasó y cóm
lunedì 1 giugno 2026·ilsoftware.it
Attacco a Red Hat: malware nascosto nei pacchetti npm, a rischio credenziali cloud
Pacchetti Red Hat Cloud Services compromessi su npm: furto di segreti CI/CD, token cloud, worm e mitigazioni.
lunedì 1 giugno 2026·thehackernews.com
Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
Compromised npm packages targeted Red Hat cloud services, enabling credential theft and expanding supply chain risks.
lunedì 1 giugno 2026·arstechnica.com
Dozens of Red Hat packages backdoored through its offical NPM channel
Anyone who has downloaded affected Red Hat packages should investigate immediately.
lunedì 1 giugno 2026·arstechnica.com
Dozens of Red Hat packages backdoored through its official NPM channel
Anyone who has downloaded affected Red Hat packages should investigate immediately.
lunedì 1 giugno 2026·bleepingcomputer.com
Red Hat npm packages compromised to steal developer credentials
More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud…
lunedì 1 giugno 2026·theregister.com
Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week
TeamPCP? Or copycat malware dev?
martedì 2 giugno 2026·infoworld.com
Infected Red Hat npm packages expose developer credentials
Researchers have uncovered a new Shai-Hulud malware variant targeting Red Hat-related npm packages, spreading through software publishing ecosystems for persistence and credential…
martedì 2 giugno 2026·securityweek.com
Supply Chain Attack Hits 32 Red Hat NPM Packages
Hackers published 96 malicious versions across 32 Red Hat NPM packages in a supply chain attack similar to Mini Shai-Hulud.
martedì 2 giugno 2026·heise.de
Red-Hat-Infostealer kommt auf mehr als 100.000 Downloads
Die Managed Cloud Services von Red Hat waren das Ziel einer Lieferkettenattacke. Dahinter steckt ein Klon des npm-Wurms Mini Shai‑Hulud.
mercoledì 3 giugno 2026·zdnet.com
Red Hat hit by npm supply‑chain attack - here's how to stay safe
Days after IBM and Red Hat announced a master security plan for open-source software, Red Hat suffers a major breach of its own. Here's what you can do about it.
giovedì 4 giugno 2026·bleepingcomputer.com
New IronWorm malware hits 36 packages in npm supply-chain attack
A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with infostealer malware called IronWorm.

Infected Red Hat npm packages expose developer credentials

Red Hat npm packages compromised to steal developer credentials

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Dozens of Red Hat packages backdoored through its offical NPM channel

Supply Chain Attack Hits 32 Red Hat NPM Packages

Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week

Timeline cronologica

31 paquetes npm de Red Hat comprometidos roban credenciales de nube

Attacco a Red Hat: malware nascosto nei pacchetti npm, a rischio credenziali cloud

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Dozens of Red Hat packages backdoored through its offical NPM channel

Dozens of Red Hat packages backdoored through its official NPM channel

Red Hat npm packages compromised to steal developer credentials

Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week

Infected Red Hat npm packages expose developer credentials

Supply Chain Attack Hits 32 Red Hat NPM Packages

Red-Hat-Infostealer kommt auf mehr als 100.000 Downloads

Red Hat hit by npm supply‑chain attack - here's how to stay safe

New IronWorm malware hits 36 packages in npm supply-chain attack

Infected Red Hat npm packages expose developer credentials

Red Hat npm packages compromised to steal developer credentials

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Dozens of Red Hat packages backdoored through its offical NPM channel

Supply Chain Attack Hits 32 Red Hat NPM Packages

Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week

Timeline cronologica

31 paquetes npm de Red Hat comprometidos roban credenciales de nube

Attacco a Red Hat: malware nascosto nei pacchetti npm, a rischio credenziali cloud

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Dozens of Red Hat packages backdoored through its offical NPM channel

Dozens of Red Hat packages backdoored through its official NPM channel

Red Hat npm packages compromised to steal developer credentials

Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week

Infected Red Hat npm packages expose developer credentials

Supply Chain Attack Hits 32 Red Hat NPM Packages

Red-Hat-Infostealer kommt auf mehr als 100.000 Downloads

Red Hat hit by npm supply‑chain attack - here's how to stay safe

New IronWorm malware hits 36 packages in npm supply-chain attack