30+ Red Hat npm Packages Hijacked in Trusted Publishing Supply-Chain Attack
A major npm supply-chain incident reportedly hit the @redhat-cloud-services scope, with malicious versions published through an OIDC trusted publishing gap. The concerning part is that the packages could still appear wit
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/programming
Originally published by r/programming. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.