Red Hat npm packages compromised by credential-stealing worm

By PulseAugur Editorial · [2 sources] · 2026-06-01 17:00

More than 30 official Red Hat npm packages were compromised by a credential-stealing worm named Miasma. This variant, similar to the open-sourced Mini Shai-Hulu, was discovered by Aikido Security. The compromised packages are part of the red hat cloud services. AI

RANK_REASON Security vulnerability affecting software packages.

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

How we ranked this

Signal score: 0 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; Security vulnerability affecting software packages.
Source corroboration: 2 independent sources; Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics: other; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: Low; Off-topic or adjacent — cluster remains reachable but doesn't surface in AI-industry rankings.
Story freshness: 117 days old; Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.