Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
www.aikido.dev
Multiple official @redhat-cloud-services npm packages were compromised with a credential-stealing worm derived from the open-sourced Mini Shai-Hulud malware, targeting cloud credentials, and developer tooling across CI/CD pipelines.
  • Dunstabzugshaubitze@feddit.org
    1·
    57 minutes ago

    on first glance it seems like the affected packages are not something someone outside of redhat would use, so i guess the fallout of this will be more interesting than the infected packages themselfs.

  • Onno (VK6FLAB)@lemmy.radio
    2·
    2 hours ago

    I can’t decide if this is real or an advertisement for the linked article service. I don’t see any CVE in the article which seems to be a good indication of the quality of the content.

    I’m not saying that this is misinformation, but I’m extremely sceptical about the nature of this article.