Red Hat's Official NPM Channel Weaponized in Massive Supply Chain Attack

This attack is particularly dangerous because it exploits the implicit trust developers place in official Red Hat packages—bypassing their security assumptions entirely. The malware executes during installation, meaning developers and their systems are compromised before they even use the code, creating widespread exposure. With the worm capable of stealing credentials and spreading to additional systems and repositories, organizations must assume any affected machine is fully compromised.