Multiple official @redhat-cloud-services npm packages were compromised with a credential-stealing worm derived from the open-sourced Mini Shai-Hulud malware, targeting cloud credentials, and developer tooling across CI/CD pipelines. Category: Vulnerabilities & Threats
Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
calendar_today
June 1, 2026
domain
aikido-security