Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
www.aikido.dev
Multiple official @redhat-cloud-services npm packages were compromised with a credential-stealing worm derived from the open-sourced Mini Shai-Hulud malware, targeting cloud credentials, and developer tooling across CI/CD pipelines.
  • Onno (VK6FLAB)@lemmy.radio
    2·
    2 months ago

    I can’t decide if this is real or an advertisement for the linked article service. I don’t see any CVE in the article which seems to be a good indication of the quality of the content.

    I’m not saying that this is misinformation, but I’m extremely sceptical about the nature of this article.