Red Hat’s npm Packages Hacked: How Supply-Chain Attacks Exploit Trust
A malicious actor compromised Red Hat’s official npm account, injecting backdoored packages that steal credentials and spread like a worm across developer systems. Here’s what happened and why it matters.