npm-security

June 1, 2026

Red Hat npm Packages Backdoored to Steal Dev Credentials

30+ Red Hat npm packages under @redhat-cloud-services were backdoored with Miasma malware to steal AWS keys, SSH keys, and CI/CD tokens. Here's what you need to know.