#redhat

Red Hat cloud services npm packages were compromised in a supply chain attack that used a preinstall script to steal developer and CI secrets.

The malicious npm packages are looking to steal credentials and propagate further.

Explore the highlights of the new networking enhancements in Red Hat OpenShift Virtualization 4.21, designed to simplify network management for VM network requirements. Discover centralized physical networks, simplified node configuration, and ...

Red Hat Device Edge and Intel's Verified Reference Blueprints can help industrial teams move AI beyond pilots and into production.

Learn how Red Hat and Everpure have collaborated to optimize autoscaling generative AI inference in a sovereign deployment model. Discover the benefits of using Everpure storage solutions in the AI Factory architecture, including true concurrent ...

A rapid wave of AI-driven security vulnerabilities shows how chasing individual CVEs can be a losing battle. Learn how Red Hat's defense-in-depth strategy works to block exploit chains like Fragnesia, Copy-Fail, DirtyDecrypt, and others.

TeamPCP? Or copycat malware dev?

More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malware, dubbed "Miasma."

Anyone who has downloaded affected Red Hat packages should investigate immediately.

StepSecurity is reporting that a number of npm packages in the @redhat-cloud-services scope inc [...]