Red Hat npm packages compromised to steal developer credentials:
More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were ...
bleepingcomputer.com/news/security/red-hat-npm-packages-compromised-to-steal-developer-credentials/
Story Details
| Last Updated | |
| Total Articles | 1 |
Similar to This
Previous
CyberNews Aug 05
Massive NPM supply chain attack is yet again ravaging hundreds of software packages
cybernews.com/security/npm-supply-chain-attack-shai-hulud-worm/
Massive ChainDrop npm supply-chain attack infects hundreds of packages: Self-propagating malware named 'ChainDrop' has compromised more than 1 ...
bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/
dlvr.it Jun 26
Miasma campaign poisons 20-plus npm packages, hunts for developer secrets: Microsoft says latest attack targets Leo Platform and RStreams packages ...
theregister.com/security/2026/06/26/miasma-campaign-poisons-20-plus-npm-packages-hunts-for-developer-secrets/5262886
dlvr.it Jun 10
GitHub pulls pin on npm's auto-run scripts: Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors
theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453
New Shai-Hulud attack trojanizes 19 science-focused PyPI packages: Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of ...
bleepingcomputer.com/news/security/new-shai-hulud-attack-trojanizes-19-science-focused-pypi-packages/
Dozens of Red Hat packages backdoored through its official NPM channel: Anyone who has downloaded affected Red Hat packages should investigate immediately.
arstechnica.com/security/2026/06/dozens-of-red-hat-packages-backdoored-through-its-offical-npm-channel/
Worm in the NPM ecosystem: Several Red Hat software packages compromised - | Golem.de
golem.de/news/wurm-im-npm-oekosystem-mehrere-softwarepakete-von-red-hat-kompromittiert-2606-209295.html
dlvr.it May 27
CrowdStrike, Google shatter Glassworm botnet: Developer-targeted, supply-chain attacks all the rage these days
theregister.com/cyber-crime/2026/05/27/crowdstrike-google-shatter-glassworm-botnet/5247337
dlvr.it May 19
Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise
theregister.com/cyber-crime/2026/05/19/shai-hulud-keeps-burrowing-314-npm-packages-infected-after-another-account-compromise/5242601
dlvr.it May 15
OpenAI caught in TanStack npm supply chain chaos after employee devices compromised
theregister.com/security/2026/05/15/openai-caught-in-tanstack-npm-supply-chain-chaos-after-employee-devices-compromised/5241019
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages: A large-scale software supply-chain attack involving the "Shai-Hulud" malware ...
bleepingcomputer.com/news/security/shai-hulud-attack-ships-signed-malicious-tanstack-mistral-npm-packages/
New npm supply-chain attack self-spreads to steal auth tokens: A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer ...
bleepingcomputer.com/news/security/new-npm-supply-chain-attack-self-spreads-to-steal-auth-tokens/
Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets: The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting ...
bleepingcomputer.com/news/security/shai-hulud-20-npm-malware-attack-exposed-up-to-400-000-dev-secrets/
New NPM supply-chain attack compromises major ENS and crypto libraries: A researcher reported that more than 400 NPM libraries, including a cluster of ENS-linked ...
cointelegraph.com/news/new-npm-supply-chain-attack-compromises-major-ens-and-crypto-libraries
CrowdStrike Infested With "Self-Replicating Worms": The vendor was one of a many whose code modules were infected by a never before seen strand of malware known ...
futurism.com/crowdstrike-infested-self-replicating-worms
CrowdStrike Infested With "Self-Replicating Worms": The vendor was one of a many whose code modules were infected by a never before seen strand of malware known ...
futurism.com/crowdstrike-infested-self-replicating-worms
dlvr.it Aug 27 25
Nx NPM packages poisoned in AI-assisted supply chain attack: : Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon
theregister.com/2025/08/27/nx_npm_supply_chain_attack/
Next