Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...
Official Red Hat NPM accounts have been compromised and used to push a malicious worm that spreads from machine to machine, ...
The tool gathered over 29,000 downloads before the malicious npm package was identified ...
More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malware, ...