Red Hat Confirms Supply Chain Compromise of @redhat-cloud-services npm Packages

Red Hat has officially confirmed a supply chain compromise affecting multiple packages published under the @redhat-cloud-services npm namespace, disclosed publicly on June 1, 2026. A compromised GitHub account was used to inject malicious code into frontend libraries maintained within a Red Hat GitHub organization, raising significant concern across enterprise environments that depend on these packages […]

The post Red Hat Confirms Supply Chain Compromise of @redhat-cloud-services npm Packages appeared first on Cyber Security News.