Attackers embedded malware into 32 Red Hat NPM packages.
As a result of the compromise of the release process based on GitHub Actions in the Red Hat owned repositories RedHatInsights, attackers managed to publish 64 malicious versions in the NPM registry, covering 32 NPM packages for the Red Hat Cloud Services platform. For each of the affected NPM packages, two malicious versions were released that integrated code to activate a new variant […]
