A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with infostealer malware called IronWorm.

Compromised npm packages targeted Red Hat cloud services, enabling credential theft and expanding supply chain risks.

Anyone who has downloaded affected Red Hat packages should investigate immediately.