CERT24Miasma supply-chain attack compromises Red Hat npm packages with a credential-stealing wormLoading data…
CERT24Threat Observatory
Period

Miasma supply-chain attack compromises Red Hat npm packages with a credential-stealing worm

A Mini Shai-Hulud supply-chain campaign codenamed Miasma compromised Red Hat @redhat-cloud-services npm packages. The malware collects credentials and secrets from developer machines, targets CI/CD environments, and may propagate through the software supply chain. The party behind the activity has not been identified.

← Back to intelligence

Miasma supply-chain attack compromises Red Hat npm packages with a credential-stealing worm

A Mini Shai-Hulud supply-chain campaign codenamed Miasma compromised Red Hat @redhat-cloud-services npm packages. The malware collects credentials and secrets from developer machines, targets CI/CD environments, and may propagate through the software supply chain. The party behind the activity has not been identified.