Miasma Supply Chain Attack Targets Red Hat npm Packages

A new supply-chain campaign, codenamed Miasma, has compromised multiple Red Hat npm packages to steal sensitive credentials and deliver a self-propagating worm, putting developer machines at risk. This sneaky attack uses clever tactics like install-time execution and encrypted exfiltration to harvest secrets and spread its reach.

https://osintsights.com/miasma-supply-chain-attack-targets-red-hat-npm-packages?utm_source=mastodon&utm_medium=social

#SupplyChainAttack #Npm #RedHat #CredentialHarvesting #CicdTargeting