A new wave of malicious npm activity has been reported involving multiple packages in t he legitimate @redhat-cloud-services namespace .
Red Hat Cloud Services npm Packages Hijacked
calendar_today
June 1, 2026
domain
sonatype