Red Hat Supply Chain Compromise Infects npm Packages

June 3, 2026

Meta Description

Attackers compromised Red Hat npm packages, stealing GitHub tokens, cloud credentials, SSH keys, and CI/CD secrets from developers worldwide.

Introduction

A significant Red Hat supply chain compromise has impacted dozens of npm packages, putting developers and enterprise infrastructure at risk. The malware, identified as the Miasma worm, steals credentials from cloud platforms, CI/CD pipelines, and developer systems. This attack demonstrates how software supply chains have become prime targets for cybercriminals.

Developers installing affected packages faced a hidden threat. Malicious preinstall hooks executed automatically, capturing GitHub tokens, SSH keys, npm credentials, and other sensitive data. Consequently, trusted open source ecosystems no longer guarantee security.

What Happened

Security researchers discovered over 30 npm packages under Red Hat's official namespace were backdoored. These packages executed malicious code during installation and targeted developer secrets along with cloud credentials.

Some of the compromised packages included:

• @redhat-cloud-services/vulnerabilities-client
• @redhat-cloud-services/rbac-client
• @redhat-cloud-services/remediations-client
• @redhat-cloud-services/sources-client

Red Hat promptly removed the affected packages. Investigators believe the attack started with compromised Red Hat credentials rather than flaws in npm itself.

Technical Analysis

The Red Hat supply chain compromise relied on malicious preinstall hooks in npm packages. These hooks ran automatically during installation. Attackers used obfuscation techniques to evade detection by security tools.

Once active, the malware harvested:

• AWS, Azure, and Google Cloud credentials
• GitHub and GitLab tokens
• SSH private keys
• npm authentication tokens
• Kubernetes secrets
• Vault secrets

Data collected by the malware was encrypted before exfiltration. Moreover, the worm attempted to propagate by compromising additional repositories.

Attack Chain

Developer installs compromised npm package
Preinstall hook executes automatically
Local credential harvesting occurs
Cloud secrets are collected
GitHub tokens are stolen
CI/CD secrets are extracted
Data is encrypted and sent to attackers
Access to additional repositories is obtained
Malicious packages are injected into other projects

This sequence highlights the speed and impact of modern supply chain attacks.

Threat Actor Tactics

Attackers behind this supply chain compromise used:

• Package poisoning
• Credential theft
• Secret harvesting
• CI/CD targeting
• Cloud credential abuse
• Repository compromise
• Worm propagation

These tactics align with recent trends in supply chain cyberattacks.

Why This Issue Matters

The compromise exposes multiple risks:

• Enterprise risks: Theft of source code, CI/CD, and cloud credentials.
• Cloud security risks: Exfiltrated secrets allow access to cloud environments.
• DevSecOps risks: CI/CD pipelines and build systems are targeted, increasing downstream exposure.
• SMB risks: Small businesses may lack monitoring and secret management.
• Operational risks: Credential theft can lead to service disruption, compliance issues, and long-term espionage.

Potential Attack Scenarios

• CI/CD pipeline compromise using stolen GitHub tokens
• Cloud environment breach via harvested credentials
• Repository takeover for injecting malicious code
• Kubernetes cluster compromise through stolen secrets
• Malware propagation across downstream users

Detection and Monitoring Strategies

• Log npm package installations and lifecycle hook execution
• Audit cloud credentials and SSH key usage
• Inspect GitHub and CI/CD pipelines for anomalies
• Monitor EDR for suspicious process execution
• Conduct threat hunting for Miasma malware indicators

Mitigation Recommendations

• Remove affected npm packages immediately
• Rotate exposed credentials, SSH keys, and tokens
• Audit CI/CD secrets and access controls
• Enable software composition analysis and SBOM tracking
• Harden repository and package management security
• Deploy Zero Trust principles in development and cloud environments
• Conduct threat hunting and incident response exercises
• Validate package integrity continuously

Key Takeaway

The Red Hat supply chain compromise demonstrates the growing risk of software ecosystem attacks. Compromised npm packages containing the Miasma worm enabled attackers to steal developer credentials, cloud secrets, and CI/CD tokens. Organizations must secure supply chains, rotate credentials, and monitor developer environments to prevent similar attacks.

James Knight Senior Principal, and lead threat intelligence analyst

James Knight is a well-known cybersecurity expert, international keynote speaker, and Senior Principal at Digital Warfare, a global cybersecurity consulting firm headquartered in McLean, Virginia, USA. Digital Warfare provides penetration testing, red teaming, vCISO, and many other services to enterprise organizations and government entities globally and across the United States. With over 25 years of hands-on experience at the intersection of offensive security and real-world threat intelligence, James has conducted pen tests, security assessments, vulnerability research, and adversarial analysis for corporate enterprises and government clients spanning financial services, critical infrastructure, and defense-adjacent sectors. His work covers the full spectrum of modern enterprise threats including advanced persistent threat campaigns, ransomware group tradecraft, supply chain compromise, AI-augmented attack techniques, and zero-day vulnerability exploitation. James is a recognized and frequently cited voice on cybersecurity in both specialist and mainstream media. Many well-known news sites, including The Daily Mail, have quoted him on many occasions: on ransomware payment policy in the context of the Colonial Pipeline attack, on how agentic AI is expected to reshape cyber warfare over the next 25 years, and on the security implications of the latest OpenAI security incident. His analysis has also been cited on Medium, where independent cybersecurity researchers have quoted his insights on supply chain security and AI-driven attack techniques. On supply chain risk, James has described the threat in terms that practitioners recognize immediately: supply chain attacks exploit the trust organizations place in third parties, requiring defenders to map every dependency like a battlefield and probe for weaknesses that could cascade across entire networks. On AI-driven attacks, his assessment reflects the same operational directness: AI-powered attacks exploit the enterprise fascination with new technology, requiring penetration testers to treat every unverified component as a potential payload delivery mechanism. His firm has been featured as a cybersecurity resource in FinancialContent and referenced across multiple professional data platforms including ZoomInfo and Datanyze as a specialist cybersecurity consulting firm serving Fortune 500 and SME organizations. At Digital Warfare, James leads the team and authors the Digital Warfare Threat Intelligence blog, publishing daily analysis of confirmed cybersecurity incidents sourced exclusively from verified primary sources including CISA advisories, vendor security bulletins, and leading threat intelligence publications. His analysis is built for security practitioners and business leaders who need actionable intelligence rather than vendor marketing. His original research includes the Digital Warfare 2026 Mid-Year Threat Pattern Report, an analysis of 28 confirmed threat incidents tracked between January and August 2026 that introduced three named security frameworks now used by enterprise security teams. The Zero-Day Priority Framework establishes a tiered patching classification system grounded in confirmed 2026 exploitation data showing that 73 percent of zero-days are weaponized within 72 hours of public disclosure. The Supply Chain Attack Taxonomy defines three distinct classes of supply chain compromise, each requiring different defensive controls and monitoring approaches. The AI Augmentation Classification documents three confirmed maturity levels of AI-assisted attack capability observed in real-world 2026 incidents, from AI-generated custom malware at Level One through fully autonomous ransomware operations at Level Three. Digital Warfare was founded in 2012 and serves corporations and governmental entities seeking rigorous security assessment and strategic security leadership from practitioners with genuine operational experience. Every member of the firm's elite team brings over 25 years of cybersecurity experience to every client engagement. Connect with James on LinkedIn or follow his threat intelligence updates at digitalwarfare.com/blog.

See Full Bio