Red Hat npm Miasma campaign steals credentials via 32 malicious packages

A credential-stealing campaign has been uncovered, involving 32 malicious npm packages that affected over 90 versions. These packages were designed to steal credentials, posing a significant security risk to users and systems that incorporated them. The campaign, dubbed 'Miasma,' specifically targeted the Red Hat ecosystem, highlighting vulnerabilities in software supply chains. AI

IMPACT Highlights supply chain vulnerabilities in software development, impacting the security of AI-related tools and infrastructure.

RANK_REASON This is a report on malicious software affecting a specific ecosystem, not a new model release or significant industry-wide event.

Read on Mastodon — mastodon.social →

• Miasma
• Microsoft
• Red Hat

• product
• safety

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →