{"investigation":{"slug":"miasma-redhat-npm-supply-chain-attack","entity_name":"Miasma RedHat npm Supply Chain Attack","trust_score":1,"severity_base":null,"score_modifier":0,"confidence":0.92,"status":"published","content_type":"investigation","summary":"Miasma is a self-propagating credential-stealing worm that compromised 32 npm packages under the @redhat-cloud-services namespace on June 1, 2026, publishing roughly 95-96 malicious versions to packages with an estimated 80,000 to 116,991 weekly downloads. The attack used a Red Hat employee's compromised GitHub account and GitHub Actions OIDC trusted publishing to push a 4.2 MB obfuscated preinstall payload derived from the Mini Shai-Hulud malware family, which is attributed to the threat actor group TeamPCP but was publicly released, so copycat use cannot be ruled out. The worm harvests cloud, CI/CD and developer credentials. Reports disagree on whether it also targets cryptocurrency wallets: Microsoft reports a list of 166 crypto browser-extension IDs, while an earlier summary found no crypto-specific targeting.","sections":[{"content":"On June 1, 2026, attackers pushed unauthorized commits to repositories in the RedHatInsights GitHub organization and used them to publish malicious versions of packages under the @redhat-cloud-services npm scope. Wiz Research first identified the compromise. The campaign was named 'Miasma' after a string found in the malicious repository descriptions: 'Miasma: The Spreading Blight.' The malicious activity came in two waves: the first at about 10:53 UTC and the second between 13:44 and 13:46 UTC. Wiz publicly disclosed the campaign at about 13:00 UTC, between the two waves, and most malicious versions were revoked from npm at that time. The root cause was identified after the second wave. Affected packages include versions of frontend-components, compliance-client, rbac-client, vulnerabilities-client, rule-components, remediations-client, tsc-transform-imports, topological-inventory-client, sources-client and host-inventory-client. Red Hat confirmed the incident and attributed the initial access to a compromised employee GitHub account. It stated that the malicious code did not reach customer production systems and that no release of the Hybrid Cloud Console was built or shipped with compromised versions.","heading":"Incident Overview","sources":[{"url":"https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages","name":"Miasma: Supply Chain Attack Targeting RedHat npm Packages — Wiz Blog","type":"research","credibility":2},{"url":"https://thehackernews.com/2026/06/miasma-supply-chain-attack-compromises.html","name":"Miasma Supply Chain Attack Compromises Red Hat npm Packages — The Hacker News","type":"news_article","credibility":2},{"url":"https://www.bleepingcomputer.com/news/security/red-hat-npm-packages-compromised-to-steal-developer-credentials/","name":"Red Hat npm Packages Compromised to Steal Developer Credentials — BleepingComputer","type":"news_article","credibility":2},{"url":"https://www.theregister.com/security/2026/06/01/shai-hulud-malware-infects-red-hat-npm-packages-downloaded-80k-times-weekly/5249803","name":"Shai-Hulud Malware Worms Red Hat npm Packages — The Register","type":"news_article","credibility":2},{"url":"https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/","name":"Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign — Microsoft Security Blog","type":"research","credibility":1},{"url":"https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/","name":"Miasma Attack Hits Red Hat npm Packages — Snyk","type":"research","credibility":2},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-006","name":"Red Hat Security Bulletin RHSB-2026-006","type":"official","credibility":1}],"severity":"critical"},{"content":"Malicious versions were published across 32 packages under the @redhat-cloud-services npm namespace. Reports differ slightly on the number of malicious versions: 96 according to one account, while Socket identified 95 affected versions as of 11:00 UTC on June 1 (reported by The Register), and other reporting gives 95-96. Reports also differ on reach: cumulative weekly downloads are put at about 80,000 by Wiz, Snyk and The Register, and at 116,991 by Aikido Security and Socket. Additional compromised versions were discovered on June 2, 2026. Key compromised packages include @redhat-cloud-services/frontend-components, frontend-components-utilities, frontend-components-notifications, rbac-client, host-inventory-client, compliance-client, types, javascript-clients and platform-frontend-ai-toolkit, plus about two dozen more API client packages. Any developer or CI/CD environment that ran npm install on any of these packages after June 1, 2026 should treat all accessible credentials as compromised.","heading":"Scale and Affected Packages","sources":[{"url":"https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/","name":"Miasma Attack Hits Red Hat npm Packages — Snyk","type":"research","credibility":2},{"url":"https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm","name":"Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm — Aikido Security","type":"research","credibility":2},{"url":"https://orca.security/resources/blog/red-hat-npm-supply-chain-attack/","name":"Red Hat npm Packages Compromised in Supply-Chain Attack — Orca Security","type":"research","credibility":2},{"url":"https://www.theregister.com/security/2026/06/01/shai-hulud-malware-infects-red-hat-npm-packages-downloaded-80k-times-weekly/5249803","name":"Shai-Hulud Malware Worms Red Hat npm Packages — The Register","type":"news_article","credibility":2},{"url":"https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/","name":"Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign — Microsoft Security Blog","type":"research","credibility":1}],"severity":"critical"},{"content":"The attack originated from a single compromised GitHub account belonging to a Red Hat employee. Dark-web monitoring firm Whiteintel found a Red Hat GitHub credential and an active session cookie in infostealer logs on April 13, 2026, and again, from a different source channel, on May 15, 2026. Whiteintel noted that the session cookie represented a fully authenticated session in which multi-factor authentication had already been satisfied, so it could be replayed without logging in again. The earliest evidence of malicious activity in the affected repositories, a commit containing the string 'Miasma: The Spreading Blight', appeared on May 29, 2026, which suggests the attacker staged or tested from that date. The roughly seven-week (48-day) gap between the April 13 sighting and the June 1 attack fits a common pattern in infostealer-enabled supply chain operations, where harvested credentials circulate in underground markets before use. However, Whiteintel explicitly stated that it could not confirm a direct causal link between the credential it detected and the Miasma attack. Using the compromised account, the attackers pushed malicious orphan commits to RedHatInsights repositories, bypassing branch protections and code review.","heading":"Initial Access: Compromised Employee Credentials","sources":[{"url":"https://whiteintel.io/blog/red-hat-miasma-supply-chain-attack","name":"Red Hat Miasma Attack: A Linked GitHub Credential Surfaced in Stealer Logs — Whiteintel","type":"research","credibility":2},{"url":"https://cybelangel.com/blog/miasma-supply-chain-attack-the-seven-week-credential-trail/","name":"Miasma Supply Chain Attack: The Seven-Week Credential Trail — CybelAngel","type":"research","credibility":2},{"url":"https://thehackernews.com/2026/06/miasma-supply-chain-attack-compromises.html","name":"Miasma Supply Chain Attack Compromises Red Hat npm Packages — The Hacker News","type":"news_article","credibility":2},{"url":"https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages","name":"Miasma: Supply Chain Attack Targeting RedHat npm Packages — Wiz Blog","type":"research","credibility":2},{"url":"https://labs.cloudsecurityalliance.org/research/csa-research-note-miasma-npm-supply-chain-redhat-20260603-cs/","name":"CSA Research Note: Miasma npm Supply Chain RedHat — Cloud Security Alliance","type":"research","credibility":2}],"severity":"critical"},{"content":"The orphan commits contained a poisoned GitHub Actions workflow (ci.yaml). The workflows in the affected repositories were configured to run on a push to any branch and requested GitHub's OIDC identity token with id-token: write permission. The attacker exchanged the short-lived OIDC token for npm publish rights and published backdoored package versions directly to the npm registry. The packages carried valid SLSA Build Level 3 provenance attestations, generated by real GitHub Actions infrastructure but from unauthorized workflow runs, so they appeared legitimate to automated supply chain security tools. Snyk noted that provenance verification alone was therefore not enough to detect the compromise. The malicious payload, a 4.2 MB obfuscated JavaScript file (_index.js), ran through a preinstall npm lifecycle hook: it executed automatically during npm install, before any application code was imported or run, and needed no user action beyond installation. The pattern mirrors earlier 2026 incidents, several of which also abused trusted publishing through GitHub Actions OIDC.","heading":"Attack Mechanism: GitHub Actions OIDC Abuse and Trusted Publishing","sources":[{"url":"https://www.deepwatch.com/labs/ca-26-018-miasma-mini-shai-hulud-compromise-of-red-hat-npm-packages/","name":"CA-26-018: Miasma/Mini Shai-Hulud Compromise of Red Hat npm Packages — Deepwatch","type":"research","credibility":2},{"url":"https://www.upwind.io/feed/miasma-npm-supply-chain-worm-redhat-credential-harvest","name":"Miasma: A Worming npm Supply Chain Attack on Red Hat Cloud Services — Upwind","type":"research","credibility":2},{"url":"https://labs.cloudsecurityalliance.org/research/csa-research-note-miasma-npm-supply-chain-redhat-20260603-cs/","name":"CSA Research Note: Miasma npm Supply Chain RedHat — Cloud Security Alliance","type":"research","credibility":2},{"url":"https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/","name":"Miasma Attack Hits Red Hat npm Packages — Snyk","type":"research","credibility":2},{"url":"https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages","name":"Miasma: Supply Chain Attack Targeting RedHat npm Packages — Wiz Blog","type":"research","credibility":2},{"url":"https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm","name":"Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm — Aikido Security","type":"research","credibility":2},{"url":"https://unit42.paloaltonetworks.com/monitoring-npm-supply-chain-attacks/","name":"The npm Threat Landscape: Attack Surface and Mitigations — Palo Alto Networks Unit 42","type":"research","credibility":2}],"severity":"critical"},{"content":"The payload uses four layers of obfuscation: ROT-based decoding, AES-128-GCM encryption, obfuscator.io string-array protection, and PBKDF2-HMAC-SHA-256 key derivation. It produces a uniquely encrypted payload for each infection, which makes hash-based detection harder. When it runs, it downloads the Bun JavaScript runtime (v1.3.13) to evade standard Node.js monitoring. It then collects a wide range of credentials: GitHub Actions secrets and runtime GITHUB_TOKEN values; npm, PyPI, Docker and GPG publish tokens and keys; AWS access keys and session tokens; GCP application default credentials and service account keys; Azure service principal and managed identity tokens; HashiCorp Vault tokens; Kubernetes service accounts and kubeconfig files; CircleCI tokens; SSH private keys; all .env files; and Anthropic API keys from ~/.claude.json. It also reads secrets directly from the memory of GitHub Actions Runner worker processes, which gets around GitHub's log masking. Later variants added dedicated collectors that enumerate every GCP and Azure identity reachable from the infected machine, a wider reach into cloud identities than earlier Shai-Hulud variants. Stolen credentials are sent to attacker-controlled GitHub repositories named 'Miasma: The Spreading Blight'. A fallback HTTPS channel imitates Anthropic API traffic (api.anthropic[.]com:443), using double-Base64 encoding and a spoofed python-requests user agent.","heading":"Payload: Obfuscation and Credential Harvesting","sources":[{"url":"https://www.deepwatch.com/labs/ca-26-018-miasma-mini-shai-hulud-compromise-of-red-hat-npm-packages/","name":"CA-26-018: Miasma/Mini Shai-Hulud Compromise of Red Hat npm Packages — Deepwatch","type":"research","credibility":2},{"url":"https://thehackernews.com/2026/06/miasma-supply-chain-attack-compromises.html","name":"Miasma Supply Chain Attack Compromises Red Hat npm Packages — The Hacker News","type":"news_article","credibility":2},{"url":"https://labs.cloudsecurityalliance.org/research/csa-research-note-miasma-npm-supply-chain-redhat-20260603-cs/","name":"CSA Research Note: Miasma npm Supply Chain RedHat — Cloud Security Alliance","type":"research","credibility":2},{"url":"https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/","name":"Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign — Microsoft Security Blog","type":"research","credibility":1},{"url":"https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages","name":"Miasma: Supply Chain Attack Targeting RedHat npm Packages — Wiz Blog","type":"research","credibility":2},{"url":"https://orca.security/resources/blog/red-hat-npm-supply-chain-attack/","name":"Red Hat npm Packages Compromised in Supply-Chain Attack — Orca Security","type":"research","credibility":2},{"url":"https://safedep.io/redhat-cloud-services-hit-by-mini-shai-hulud-npm-worm/","name":"Mini Shai-Hulud 'Miasma: The Spreading Blight' Hits @redhat-cloud-services — SafeDep","type":"research","credibility":2}],"severity":"critical"},{"content":"Miasma is a self-propagating worm. Once it has harvested npm tokens (including npm OIDC tokens) from a victim environment, it republishes backdoored versions of any other packages that identity can publish, generating forged SLSA provenance attestations for each one. This spreads the compromise beyond the original Red Hat packages to downstream consumers. The payload sets up OS-level persistence on Windows, macOS and Linux. On Linux it installs a systemd service, gh-token-monitor.service, with a launchctl equivalent on macOS, that checks whether stolen GitHub tokens are still valid. A dead man's switch, identified by the string 'IfYouInvalidateThisTokenItWillNukeTheComputerOfTheOwner', is set to run destructive commands (rm -rf ~/) if a stolen token is revoked before the persistence is removed. For this reason, Deepwatch warns responders not to revoke stolen credentials until they have removed the persistence mechanisms. Other dead-drop resolver strings observed are 'firedalazer' and 'thebeautifulmarchoftime'. The worm also plants persistence hooks aimed at AI developer agents, including SessionStart hooks in Anthropic Claude Code configurations and tasks.json entries with 'runOn: folderOpen' in VS Code projects. It does not run on Russian-language systems, and it checks for endpoint protection software from CrowdStrike, SentinelOne, Carbon Black and StepSecurity before executing.","heading":"Self-Propagation, Persistence and Dead Man's Switch","sources":[{"url":"https://www.deepwatch.com/labs/ca-26-018-miasma-mini-shai-hulud-compromise-of-red-hat-npm-packages/","name":"CA-26-018: Miasma/Mini Shai-Hulud Compromise of Red Hat npm Packages — Deepwatch","type":"research","credibility":2},{"url":"https://www.invisirisk.com/blog/red-hat-npm-supply-chain-attack-miasma-hits-redhat-cloud-services/","name":"Miasma Supply Chain Attack Hits Red Hat @redhat-cloud-services Packages — InvisiRisk","type":"research","credibility":2},{"url":"https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/","name":"Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign — Microsoft Security Blog","type":"research","credibility":1},{"url":"https://safedep.io/redhat-cloud-services-hit-by-mini-shai-hulud-npm-worm/","name":"Mini Shai-Hulud 'Miasma: The Spreading Blight' Hits @redhat-cloud-services — SafeDep","type":"research","credibility":2}],"severity":"critical"},{"content":"Reports differ on whether Miasma targets cryptocurrency wallets directly. One summary of vendor reporting, drawing on Wiz and Mend.io, states that Miasma contains no cryptocurrency wallet-draining or blockchain-specific payload modules and that no security vendor identified crypto-specific targeting. By contrast, Microsoft's analysis, also cited alongside Upwind and Snyk, reports that the payload carried a hardcoded list of 166 cryptocurrency browser-extension IDs, including MetaMask, Phantom, Coinbase Wallet, Binance Wallet and TronLink. According to that analysis, the malware enumerated browser profiles' Local Extension Settings directories, matched installed extensions against the list, and exfiltrated the matched inventory along with the associated credential material. Either way, the attack poses serious indirect risks to crypto developers. The worm harvests environment variables and .env files, which in crypto development often hold private keys, wallet seeds or RPC provider API keys. It steals npm and PyPI publish tokens, which would let an attacker push malicious versions of any package the victim maintains, including crypto libraries. It harvests Anthropic API keys, which are increasingly used in DeFi and crypto-adjacent AI tooling. And @redhat-cloud-services packages are common in enterprise environments that may run crypto or fintech workloads. Stolen developer credentials could give direct access to private keys, deployment secrets or treasury-management tooling. Because the worm spreads itself, any organization whose npm publish tokens were harvested may have unknowingly republished further compromised packages. Crypto teams and DeFi protocols that pull these packages into CI/CD, even as transitive dependencies, should treat this as a full credential-rotation incident.","heading":"Cryptocurrency and Web3 Risk","sources":[{"url":"https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages","name":"Miasma: Supply Chain Attack Targeting RedHat npm Packages — Wiz Blog","type":"research","credibility":2},{"url":"https://www.mend.io/blog/npm-supply-chain-attack-infiltrates-popular-packages/","name":"NPM Supply Chain Attack Hits Popular Packages with Crypto Drainer — Mend.io","type":"research","credibility":2},{"url":"https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/","name":"Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign — Microsoft Security Blog","type":"research","credibility":1},{"url":"https://www.upwind.io/feed/miasma-npm-supply-chain-worm-redhat-credential-harvest","name":"Miasma: A Worming npm Supply Chain Attack on Red Hat Cloud Services — Upwind","type":"research","credibility":2},{"url":"https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/","name":"Miasma Attack Hits Red Hat npm Packages — Snyk","type":"research","credibility":2}],"severity":"critical"},{"content":"Miasma is a variant of Mini Shai-Hulud, a credential-stealing npm worm attributed to the threat actor group TeamPCP. The group is also tracked as UNC6780 (Google), DeadCatx3, PCPcat, ShellForce and CipherForce. TeamPCP is described as a financially motivated cybercriminal group that emerged in late 2025 and has run a series of npm and PyPI supply chain attacks. On May 12, 2026, it published the full Mini Shai-Hulud source code on GitHub under an MIT License with the message 'Shai-Hulud: Open Sourcing The Carnage', together with operational guidance encouraging independent campaigns. At the same time it posted on BreachForums announcing a $1,000 contest for the largest supply chain attack carried out with the code. Because the code is public, attribution is harder: Wiz concluded that the overlap between Miasma and earlier TeamPCP operations shows 'TTP overlap rather than definitive attribution', leaving open the possibility of a copycat actor. The changes visible in the Miasma variant are described as largely cosmetic, replacing the original's Dune references with Greek mythology themes. The malware family's documented evolution runs from the original Shai-Hulud worm (September 2025) through SHA1-Hulud (November 2025) and a SANDWORM_MODE variant (March 2026) to the fourth-generation Mini Shai-Hulud (April 2026). Earlier campaigns in this family compromised Bitwarden (April 22, 2026), SAP (April 29, 2026), PyTorch Lightning (April 30, 2026) and Microsoft's DurableTask (May 19, 2026), plus more than 160 packages in the May 12, 2026 wave. Cumulatively, the family has hit over 170 npm and PyPI packages with about 518 million weekly downloads, affecting organizations including OpenAI, Mistral AI, the European Commission, GitHub, Aqua Security, Bitwarden and Checkmarx. OX Security identified at least four copycat npm packages deploying Shai-Hulud clones in May 2026, including chalk-tempalte (a typosquat of chalk), @deadcode09284814/axios-util, axois-utils and color-style-utils. CVE-2026-45321 (CVSS v4.0 9.6) was assigned to the earlier TanStack compromise in this campaign family. No CVE has been assigned to the Miasma incident itself.","heading":"Attribution: TeamPCP and the Mini Shai-Hulud Malware Family","sources":[{"url":"https://www.tenable.com/blog/mini-shai-hulud-frequently-asked-questions","name":"Mini Shai-Hulud Supply Chain Attack CVE-2026-45321 FAQ — Tenable","type":"research","credibility":2},{"url":"https://www.reversinglabs.com/blog/mini-shai-hulud-tears-at-oss-trust","name":"Team PCP's Mini Shai-Hulud Tears at Open-Source Trust — ReversingLabs","type":"research","credibility":2},{"url":"https://www.reversinglabs.com/blog/the-shai-hulud-code-drop","name":"Shai-Hulud Code Drop: Open Season for Supply Chain Attacks — ReversingLabs","type":"research","credibility":2},{"url":"https://phoenix.security/mini-shai-hulud-tanstack-openai-mistral-copycats-deadcode-actor/","name":"Mini Shai-Hulud Copycats and the TanStack Wave — Phoenix Security","type":"research","credibility":2},{"url":"https://www.securityweek.com/teampcp-ups-the-game-releases-shai-hulud-worms-source-code/","name":"TeamPCP Ups the Game, Releases Shai-Hulud Worm's Source Code — SecurityWeek","type":"news_article","credibility":2},{"url":"https://www.ox.security/blog/new-actors-deploy-shai-hulud-clones-teampcp-copycats-are-here/","name":"New Actors Deploy Shai-Hulud Clones: TeamPCP Copycats Are Here — OX Security","type":"research","credibility":2},{"url":"https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages","name":"Miasma: Supply Chain Attack Targeting RedHat npm Packages — Wiz Blog","type":"research","credibility":2},{"url":"https://phoenix.security/miasma-redhat-cloud-services-npm-supply-chain-shai-hulud-variant/","name":"Miasma NPM Supply Chain Attack: Red Hat Cloud Services npm Packages — Phoenix Security","type":"research","credibility":2}],"severity":"high"},{"content":"Security vendors have published the following indicators of compromise (IOCs) for Miasma. File-based IOCs: temporary JavaScript files at /tmp/p<random>.js; unexpected files named .github/setup.js and _index.js in node_modules; modified IDE configurations in settings.json and .vscode/tasks.json; and systemd services named gh-token-monitor.service. Network IOCs: unusual DNS queries and HTTPS traffic to api.anthropic[.]com, which the malware spoofs as a C2 channel; outbound requests with the spoofed user agent python-requests/2.31.0; and creation of GitHub repositories whose descriptions contain 'Miasma: The Spreading Blight' or reversed variants. Strings embedded in the malware include 'IfYouInvalidateThisTokenItWillNukeTheComputerOfTheOwner', 'firedalazer' and 'thebeautifulmarchoftime'. For detection, vendors advise searching lock files for @redhat-cloud-services references and looking for index.js files larger than 4 MB inside node_modules/@redhat-cloud-services. The Snyk advisory is SNYK-JS-REDHATCLOUDSERVICESFRONTENDCOMPONENTS-17117384, rated CVSS 9.3 (Critical).","heading":"Indicators of Compromise","sources":[{"url":"https://www.deepwatch.com/labs/ca-26-018-miasma-mini-shai-hulud-compromise-of-red-hat-npm-packages/","name":"CA-26-018: Miasma/Mini Shai-Hulud Compromise of Red Hat npm Packages — Deepwatch","type":"research","credibility":2},{"url":"https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/","name":"Miasma Attack Hits Red Hat npm Packages — Snyk","type":"research","credibility":2},{"url":"https://www.invisirisk.com/blog/red-hat-npm-supply-chain-attack-miasma-hits-redhat-cloud-services/","name":"Miasma Supply Chain Attack Hits Red Hat @redhat-cloud-services Packages — InvisiRisk","type":"research","credibility":2}],"severity":"high"},{"content":"Red Hat published Security Bulletin RHSB-2026-006 on June 1, 2026 and updated it on June 3, 2026 with preliminary findings. The bulletin confirmed that a compromised GitHub account was used to push unauthorized commits to repositories in the RedHatInsights GitHub organization. Red Hat stated that no Red Hat products or enterprise software were built or shipped with compromised versions, crediting internal version pinning by engineering teams and a publication process that strips installation-time scripts before deployment. The affected libraries are frontend JavaScript components used in the Hybrid Cloud Console (console.redhat.com) web interface. They are unrelated to Azure Red Hat OpenShift, OpenShift Dedicated and Red Hat OpenShift Service on AWS. Based on the findings available when the bulletin was issued, Red Hat's position was that customers did not need to take any action. That contrasts with independent vendors' advice that any environment that installed the affected versions should treat its credentials as compromised (see Remediation Guidance). Red Hat removed the compromised versions from npm after disclosure and said its investigation of build systems and dependency tracking was continuing.","heading":"Red Hat Response and Official Guidance","sources":[{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-006","name":"Red Hat Security Bulletin RHSB-2026-006","type":"official","credibility":1},{"url":"https://www.theregister.com/security/2026/06/01/shai-hulud-malware-infects-red-hat-npm-packages-downloaded-80k-times-weekly/5249803","name":"Shai-Hulud Malware Worms Red Hat npm Packages — The Register","type":"news_article","credibility":2},{"url":"https://www.bleepingcomputer.com/news/security/red-hat-npm-packages-compromised-to-steal-developer-credentials/","name":"Red Hat npm Packages Compromised to Steal Developer Credentials — BleepingComputer","type":"news_article","credibility":2}],"severity":"medium"},{"content":"Snyk, Wiz, Orca, Microsoft and Deepwatch have published broadly consistent remediation guidance. The most important first step, stressed by Deepwatch, is to remove persistence before revoking credentials, because the dead man's switch runs rm -rf ~/ if stolen GitHub tokens are invalidated while the monitoring service is still active. Recommended steps: (1) Audit lock files for affected @redhat-cloud-services versions and pin dependencies away from them. (2) Reinstall packages with scripts disabled, using npm install --ignore-scripts. (3) Remove persistence: find and remove changes to .claude/settings.json, .vscode/tasks.json entries with 'runOn: folderOpen', unauthorized .github/setup.js files, and systemd or launchctl services named gh-token-monitor. (4) Only after removing persistence, assume every credential reachable from affected environments is compromised and rotate it: npm tokens, GitHub personal access tokens, AWS/GCP/Azure keys and service principals, HashiCorp Vault tokens, SSH keys, Kubernetes service accounts, Docker credentials, GPG keys and CircleCI tokens. (5) Audit GitHub organizations for unauthorized repositories, especially any labeled 'Miasma: The Spreading Blight', and for unauthorized Actions workflow files. (6) Check developer workstations and CI/CD runners for signs of infostealer compromise. (7) Harden pipelines: enforce branch protection with mandatory code review, restrict id-token: write permissions and scope OIDC trust policies narrowly, pin OIDC publishers, allowlist dependencies, require 2FA for npm publishing, and validate SBOM attestations. Snyk noted that provenance verification alone was not enough in this incident.","heading":"Remediation Guidance","sources":[{"url":"https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/","name":"Miasma Attack Hits Red Hat npm Packages — Snyk","type":"research","credibility":2},{"url":"https://www.deepwatch.com/labs/ca-26-018-miasma-mini-shai-hulud-compromise-of-red-hat-npm-packages/","name":"CA-26-018: Miasma/Mini Shai-Hulud Compromise of Red Hat npm Packages — Deepwatch","type":"research","credibility":2},{"url":"https://orca.security/resources/blog/red-hat-npm-supply-chain-attack/","name":"Red Hat npm Packages Compromised in Supply-Chain Attack — Orca Security","type":"research","credibility":2},{"url":"https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages","name":"Miasma: Supply Chain Attack Targeting RedHat npm Packages — Wiz Blog","type":"research","credibility":2},{"url":"https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/","name":"Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign — Microsoft Security Blog","type":"research","credibility":1}],"severity":"high"},{"content":"The Miasma incident is part of a documented surge in npm and PyPI supply chain attacks in spring 2026, several of them directly linked to TeamPCP's Mini Shai-Hulud campaign. On March 31, 2026, the Axios library was compromised when attackers inserted a malicious dependency, 'plain-crypto-js', into several versions. On April 22, 2026, the Bitwarden CLI was compromised through a poisoned GitHub Action, with a payload that specifically targeted crypto wallet data. Four SAP npm packages were compromised through a leaked npm token on April 29, 2026, PyTorch Lightning on PyPI on April 30, 2026, and Microsoft's DurableTask on May 19, 2026. TanStack packages were also hit, receiving CVE-2026-45321. On May 20, 2026, nine Polymarket-branded npm packages were published to harvest crypto wallet keys. On May 24, 2026, Socket reported the TrapDoor campaign: more than 34 malicious packages and 384+ related versions across npm, PyPI and Crates.io, targeting crypto, DeFi and AI developers. TeamPCP's public release of the Mini Shai-Hulud source code on May 12, 2026, together with its BreachForums contest, lowered the barrier to entry and enabled copycat actors to mount attacks with little technical skill. Later reporting says a Miasma v2 variant spread through a malicious binding.gyp file and reached 57 or more packages, and that IronWorm, a separate Shai-Hulud derivative, hit more npm packages in a subsequent wave.","heading":"Broader npm Supply Chain Context (2026)","sources":[{"url":"https://unit42.paloaltonetworks.com/monitoring-npm-supply-chain-attacks/","name":"The npm Threat Landscape: Attack Surface and Mitigations — Palo Alto Networks Unit 42","type":"research","credibility":2},{"url":"https://cyberleveling.com/blog/trapdoor-supply-chain-attack-npm-pypi-crates-2026","name":"TrapDoor: A Crypto-Stealing Supply Chain Attack Across npm, PyPI, and Crates.io — CyberLeveling","type":"news_article","credibility":2},{"url":"https://flashpoint.io/blog/mini-shai-hulud-worm-new-era-ci-cd-exploitation/","name":"The Mini Shai-Hulud Worm and the New Era of CI/CD Exploitation — Flashpoint","type":"research","credibility":2},{"url":"https://securityboulevard.com/2026/05/mini-shai-hulud-frequently-asked-questions-about-the-teampcp-npm-and-pypi-supply-chain-campaign/","name":"Mini Shai-Hulud: Frequently Asked Questions — Security Boulevard","type":"research","credibility":2},{"url":"https://safedep.io/malicious-polymarket-npm-crypto-wallet-drainer/","name":"Polymarket npm Packages Steal Crypto Wallet Keys — SafeDep","type":"research","credibility":2},{"url":"https://www.ox.security/blog/new-actors-deploy-shai-hulud-clones-teampcp-copycats-are-here/","name":"New Actors Deploy Shai-Hulud Clones: TeamPCP Copycats Are Here — OX Security","type":"research","credibility":2},{"url":"https://www.tenable.com/blog/mini-shai-hulud-frequently-asked-questions","name":"Mini Shai-Hulud Supply Chain Attack CVE-2026-45321 FAQ — Tenable","type":"research","credibility":2},{"url":"https://semgrep.dev/blog/2026/miasma-v2-self-spreading-npm-worm-now-uses-malicious-bindinggyp-file-and-compromises-57-packages/","name":"Miasma v2: Self-Spreading npm Worm Now Uses Malicious binding.gyp — Semgrep","type":"research","credibility":2},{"url":"https://thehackernews.com/2026/06/ironworm-and-new-miasma-worm-variant.html","name":"IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks — The Hacker News","type":"news_article","credibility":2},{"url":"https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm","name":"Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm — Aikido Security","type":"research","credibility":2}],"severity":"high"}],"timeline":[{"date":"2025-09","event":"The original Shai-Hulud worm emerges as the first self-replicating malware targeting the npm ecosystem; it is attributed to TeamPCP.","source":"Tenable Mini Shai-Hulud FAQ","source_url":"https://www.tenable.com/blog/mini-shai-hulud-frequently-asked-questions"},{"date":"2026-04","event":"A Red Hat employee's GitHub credential and active session cookie appear in infostealer logs, about seven weeks before the attack (identified later by Whiteintel, which could not confirm a direct causal link).","source":"Whiteintel; Cloud Security Alliance Research Note","source_url":"https://whiteintel.io/blog/red-hat-miasma-supply-chain-attack"},{"date":"2026-04","event":"Bitwarden CLI is compromised through a poisoned GitHub Actions workflow in the Mini Shai-Hulud campaign; the payload targets crypto wallet data.","source":"Aikido Security","source_url":"https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm"},{"date":"2026-04","event":"Four SAP npm packages are compromised through a leaked npm token in the Mini Shai-Hulud campaign.","source":"Aikido Security","source_url":"https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm"},{"date":"2026-04","event":"The PyTorch Lightning package on PyPI is compromised as part of the same campaign.","source":"Aikido Security","source_url":"https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm"},{"date":"2026-05","event":"TeamPCP open-sources the full Mini Shai-Hulud source code on GitHub under an MIT License ('Shai-Hulud: Open Sourcing The Carnage') and announces a $1,000 BreachForums contest for the largest supply chain attack using the code. The campaign expands to 160+ packages the same day.","source":"ReversingLabs; SecurityWeek; Tenable","source_url":"https://www.reversinglabs.com/blog/the-shai-hulud-code-drop"},{"date":"2026-05","event":"The Red Hat employee's GitHub credential appears in infostealer logs a second time, from a different source channel.","source":"Whiteintel; The Hacker News","source_url":"https://whiteintel.io/blog/red-hat-miasma-supply-chain-attack"},{"date":"2026-05","event":"Microsoft's DurableTask npm package is compromised in the Mini Shai-Hulud campaign.","source":"Aikido Security","source_url":"https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm"},{"date":"2026-05","event":"Nine malicious Polymarket-branded npm packages are published to steal crypto wallet keys.","source":"SafeDep","source_url":"https://safedep.io/malicious-polymarket-npm-crypto-wallet-drainer/"},{"date":"2026-05","event":"Socket reports the TrapDoor campaign: 34+ malicious packages across npm, PyPI and Crates.io targeting crypto and DeFi developers.","source":"CyberLeveling","source_url":"https://cyberleveling.com/blog/trapdoor-supply-chain-attack-npm-pypi-crates-2026"},{"date":"2026-05","event":"The earliest malicious commit containing the string 'Miasma: The Spreading Blight' appears in RedHatInsights repositories.","source":"The Hacker News","source_url":"https://thehackernews.com/2026/06/miasma-supply-chain-attack-compromises.html"},{"date":"2026-06","event":"First wave of malicious @redhat-cloud-services packages is published at about 10:53 UTC, with valid SLSA provenance attestations.","source":"Wiz Blog; Orca Security","source_url":"https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages"},{"date":"2026-06","event":"The Register reports that Socket had identified 95 affected package versions as of 11:00 UTC, with combined weekly downloads of about 80,000.","source":"The Register","source_url":"https://www.theregister.com/security/2026/06/01/shai-hulud-malware-infects-red-hat-npm-packages-downloaded-80k-times-weekly/5249803"},{"date":"2026-06","event":"Wiz Research publicly discloses the Miasma campaign at about 13:00 UTC; most malicious versions are revoked from npm.","source":"Snyk; The Register; BleepingComputer","source_url":"https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/"},{"date":"2026-06","event":"Second malicious wave is published between about 13:44 and 13:46 UTC; the root cause is identified.","source":"Snyk","source_url":"https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/"},{"date":"2026-06","event":"Red Hat publishes Security Bulletin RHSB-2026-006, stating that no Red Hat products shipped with compromised versions and no customer action is required, and removes the affected versions from npm.","source":"Red Hat Security Bulletin RHSB-2026-006","source_url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-006"},{"date":"2026-06","event":"More compromised package versions are discovered; the Microsoft Defender Security Research Team publishes its analysis of the incident.","source":"Microsoft Security Blog","source_url":"https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/"},{"date":"2026-06","event":"Red Hat updates RHSB-2026-006 with preliminary findings and describes the investigation as ongoing.","source":"Red Hat Security Bulletin RHSB-2026-006","source_url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-006"},{"date":"2026-06","event":"The Cloud Security Alliance publishes a research note on Miasma with extended technical analysis.","source":"Cloud Security Alliance","source_url":"https://labs.cloudsecurityalliance.org/research/csa-research-note-miasma-npm-supply-chain-redhat-20260603-cs/"}],"sources_used":[{"url":"https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages","name":"Miasma: Supply Chain Attack Targeting RedHat npm Packages — Wiz Blog","type":"research","archive_url":"http://web.archive.org/web/20260722055210/https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages","credibility":2,"archive_timestamp":"2026-07-22T05:52:10+00:00"},{"url":"https://thehackernews.com/2026/06/miasma-supply-chain-attack-compromises.html","name":"Miasma Supply Chain Attack Compromises Red Hat npm Packages — The Hacker News","type":"news_article","archive_url":"http://web.archive.org/web/20260722034737/https://thehackernews.com/2026/06/miasma-supply-chain-attack-compromises.html","credibility":2,"archive_timestamp":"2026-07-22T03:47:37+00:00"},{"url":"https://www.bleepingcomputer.com/news/security/red-hat-npm-packages-compromised-to-steal-developer-credentials/","name":"Red Hat npm Packages Compromised to Steal Developer Credentials — BleepingComputer","type":"news_article","archive_url":"http://web.archive.org/web/20260718161415/https://www.bleepingcomputer.com/news/security/red-hat-npm-packages-compromised-to-steal-developer-credentials/","credibility":2,"archive_timestamp":"2026-07-18T16:14:15+00:00"},{"url":"https://www.theregister.com/security/2026/06/01/shai-hulud-malware-infects-red-hat-npm-packages-downloaded-80k-times-weekly/5249803","name":"Shai-Hulud Malware Worms Red Hat npm Packages Downloaded 80K Times Weekly — The Register","type":"news_article","archive_url":"http://web.archive.org/web/20260726085001/https://www.theregister.com/security/2026/06/01/shai-hulud-malware-infects-red-hat-npm-packages-downloaded-80k-times-weekly/5249803","credibility":2,"archive_timestamp":"2026-07-26T08:50:01+00:00"},{"url":"https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/","name":"Miasma Attack Hits Red Hat npm Packages — Snyk","type":"research","archive_url":"http://web.archive.org/web/20260722234512/https://snyk.io/blog/miasma-supply-chain-attack-malicious-code-redhat-cloud-services-npm-packages/","credibility":2,"archive_timestamp":"2026-07-22T23:45:12+00:00"},{"url":"https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm","name":"Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm — Aikido Security","type":"research","archive_url":"http://web.archive.org/web/20260720013711/https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm","credibility":2,"archive_timestamp":"2026-07-20T01:37:11+00:00"},{"url":"https://orca.security/resources/blog/red-hat-npm-supply-chain-attack/","name":"Red Hat npm Packages Compromised in Supply-Chain Attack — Orca Security","type":"research","archive_url":"http://web.archive.org/web/20260618213825/https://orca.security/resources/blog/red-hat-npm-supply-chain-attack/","credibility":2,"archive_timestamp":"2026-06-18T21:38:25+00:00"},{"url":"https://www.deepwatch.com/labs/ca-26-018-miasma-mini-shai-hulud-compromise-of-red-hat-npm-packages/","name":"CA-26-018: Miasma/Mini Shai-Hulud Compromise of Red Hat npm Packages — Deepwatch","type":"research","archive_url":"https://web.archive.org/web/20260726230545/https://www.deepwatch.com/labs/ca-26-018-miasma-mini-shai-hulud-compromise-of-red-hat-npm-packages/","credibility":2,"archive_timestamp":"2026-07-26T23:05:45+00:00"},{"url":"https://www.upwind.io/feed/miasma-npm-supply-chain-worm-redhat-credential-harvest","name":"Miasma: A Worming npm Supply Chain Attack on Red Hat Cloud Services — Upwind","type":"research","archive_url":"https://web.archive.org/web/20260726162321/https://www.upwind.io/feed/miasma-npm-supply-chain-worm-redhat-credential-harvest","credibility":2,"archive_timestamp":"2026-07-26T16:23:21+00:00"},{"url":"https://labs.cloudsecurityalliance.org/research/csa-research-note-miasma-npm-supply-chain-redhat-20260603-cs/","name":"CSA Research Note: Miasma npm Supply Chain RedHat — Cloud Security Alliance","type":"research","archive_url":"http://web.archive.org/web/20260712123554/https://labs.cloudsecurityalliance.org/research/csa-research-note-miasma-npm-supply-chain-redhat-20260603-cs/","credibility":2,"archive_timestamp":"2026-07-12T12:35:54+00:00"},{"url":"https://www.invisirisk.com/blog/red-hat-npm-supply-chain-attack-miasma-hits-redhat-cloud-services/","name":"Miasma Supply Chain Attack Hits Red Hat @redhat-cloud-services Packages — InvisiRisk","type":"research","archive_url":"https://web.archive.org/web/20260726154428/https://www.invisirisk.com/blog/red-hat-npm-supply-chain-attack-miasma-hits-redhat-cloud-services/","credibility":2,"archive_timestamp":"2026-07-26T15:44:28+00:00"},{"url":"https://www.rescana.com/post/miasma-supply-chain-attack-compromises-red-hat-redhat-cloud-services-npm-packages-with-credential-stealing-worm-cybersec","name":"Miasma Supply Chain Attack Compromises Red Hat npm Packages — Rescana","type":"news_article","archive_url":"http://web.archive.org/web/20260606002127/https://www.rescana.com/post/miasma-supply-chain-attack-compromises-red-hat-redhat-cloud-services-npm-packages-with-credential-stealing-worm-cybersec","credibility":2,"archive_timestamp":"2026-06-06T00:21:27+00:00"},{"url":"https://www.tenable.com/blog/mini-shai-hulud-frequently-asked-questions","name":"Mini Shai-Hulud Supply Chain Attack CVE-2026-45321 FAQ — Tenable","type":"research","archive_url":"http://web.archive.org/web/20260704191810/https://www.tenable.com/blog/mini-shai-hulud-frequently-asked-questions","credibility":2,"archive_timestamp":"2026-07-04T19:18:10+00:00"},{"url":"https://securityboulevard.com/2026/05/mini-shai-hulud-frequently-asked-questions-about-the-teampcp-npm-and-pypi-supply-chain-campaign/","name":"Mini Shai-Hulud: Frequently Asked Questions — Security Boulevard","type":"research","archive_url":"http://web.archive.org/web/20260522082810/https://securityboulevard.com/2026/05/mini-shai-hulud-frequently-asked-questions-about-the-teampcp-npm-and-pypi-supply-chain-campaign/","credibility":2,"archive_timestamp":"2026-05-22T08:28:10+00:00"},{"url":"https://www.reversinglabs.com/blog/mini-shai-hulud-tears-at-oss-trust","name":"Team PCP's Mini Shai-Hulud Tears at Open-Source Trust — ReversingLabs","type":"research","archive_url":"https://web.archive.org/web/20260726110825/https://www.reversinglabs.com/blog/mini-shai-hulud-tears-at-oss-trust","credibility":2,"archive_timestamp":"2026-07-26T11:08:25+00:00"},{"url":"https://www.reversinglabs.com/blog/the-shai-hulud-code-drop","name":"Shai-Hulud Code Drop: Open Season for Supply Chain Attacks — ReversingLabs","type":"research","archive_url":"http://web.archive.org/web/20260521084338/https://www.reversinglabs.com/blog/the-shai-hulud-code-drop","credibility":2,"archive_timestamp":"2026-05-21T08:43:38+00:00"},{"url":"https://flashpoint.io/blog/mini-shai-hulud-worm-new-era-ci-cd-exploitation/","name":"The Mini Shai-Hulud Worm and the New Era of CI/CD Exploitation — Flashpoint","type":"research","archive_url":"http://web.archive.org/web/20260626214649/https://flashpoint.io/blog/mini-shai-hulud-worm-new-era-ci-cd-exploitation/","credibility":2,"archive_timestamp":"2026-06-26T21:46:49+00:00"},{"url":"https://phoenix.security/mini-shai-hulud-tanstack-openai-mistral-copycats-deadcode-actor/","name":"Mini Shai-Hulud Copycats and the TanStack Wave — Phoenix Security","type":"research","archive_url":"http://web.archive.org/web/20260728084613/https://phoenix.security/mini-shai-hulud-tanstack-openai-mistral-copycats-deadcode-actor/","credibility":2,"archive_timestamp":"2026-07-28T08:46:13+00:00"},{"url":"https://www.akamai.com/blog/security-research/mini-shai-hulud-worm-returns-goes-public","name":"Mini Shai-Hulud: The Worm Returns and Goes Public — Akamai","type":"research","archive_url":"http://web.archive.org/web/20260611232056/https://www.akamai.com/blog/security-research/mini-shai-hulud-worm-returns-goes-public","credibility":2,"archive_timestamp":"2026-06-11T23:20:56+00:00"},{"url":"https://unit42.paloaltonetworks.com/monitoring-npm-supply-chain-attacks/","name":"The npm Threat Landscape: Attack Surface and Mitigations — Palo Alto Networks Unit 42","type":"research","archive_url":"http://web.archive.org/web/20260723005417/https://unit42.paloaltonetworks.com/monitoring-npm-supply-chain-attacks/","credibility":2,"archive_timestamp":"2026-07-23T00:54:17+00:00"},{"url":"https://cyberleveling.com/blog/trapdoor-supply-chain-attack-npm-pypi-crates-2026","name":"TrapDoor: A Crypto-Stealing Supply Chain Attack Across npm, PyPI, and Crates.io — CyberLeveling","type":"news_article","archive_url":"https://web.archive.org/web/20260726085831/https://cyberleveling.com/blog/trapdoor-supply-chain-attack-npm-pypi-crates-2026","credibility":2,"archive_timestamp":"2026-07-26T08:58:31+00:00"},{"url":"https://safedep.io/malicious-polymarket-npm-crypto-wallet-drainer/","name":"Polymarket npm Packages Steal Crypto Wallet Keys — SafeDep","type":"research","archive_url":"http://web.archive.org/web/20260522055516/https://safedep.io/malicious-polymarket-npm-crypto-wallet-drainer/","credibility":2,"archive_timestamp":"2026-05-22T05:55:16+00:00"},{"url":"https://phoenix.security/miasma-redhat-cloud-services-npm-supply-chain-shai-hulud-variant/","name":"Miasma NPM Supply Chain Attack: Red Hat Cloud Services npm Packages — Phoenix Security","type":"research","archive_url":"http://web.archive.org/web/20260727003559/https://phoenix.security/miasma-redhat-cloud-services-npm-supply-chain-shai-hulud-variant/","credibility":2,"archive_timestamp":"2026-07-27T00:35:59+00:00"},{"url":"https://devops.com/shai-hulud-clone-miasma-compromises-32-red-hat-npm-packages/","name":"Shai-Hulud Clone 'Miasma' Compromises 32 Red Hat npm Packages — DevOps.com","type":"news_article","archive_url":"http://web.archive.org/web/20260727085730/https://devops.com/shai-hulud-clone-miasma-compromises-32-red-hat-npm-packages/","credibility":2,"archive_timestamp":"2026-07-27T08:57:30+00:00"},{"url":"https://www.mend.io/blog/npm-supply-chain-attack-infiltrates-popular-packages/","name":"NPM Supply Chain Attack Hits Popular Packages with Crypto Drainer — Mend.io","type":"research","archive_url":"http://web.archive.org/web/20260513073610/https://www.mend.io/blog/npm-supply-chain-attack-infiltrates-popular-packages/","credibility":2,"archive_timestamp":"2026-05-13T07:36:10+00:00"},{"url":"https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/","name":"Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign — Microsoft Security Blog","type":"research","archive_url":"http://web.archive.org/web/20260706112310/https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/","credibility":1,"archive_timestamp":"2026-07-06T11:23:10+00:00"},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-006","name":"Red Hat Security Bulletin RHSB-2026-006","type":"official","archive_url":"http://web.archive.org/web/20260905201808/https://access.redhat.com/security/vulnerabilities/RHSB-2026-006","credibility":1,"archive_timestamp":"2026-09-05T20:18:08+00:00"},{"url":"https://whiteintel.io/blog/red-hat-miasma-supply-chain-attack","name":"Red Hat Miasma Attack: A Linked GitHub Credential Surfaced in Stealer Logs — Whiteintel","type":"research","archive_url":"http://web.archive.org/web/20260706194854/https://whiteintel.io/blog/red-hat-miasma-supply-chain-attack","credibility":2,"archive_timestamp":"2026-07-06T19:48:54+00:00"},{"url":"https://cybelangel.com/blog/miasma-supply-chain-attack-the-seven-week-credential-trail/","name":"Miasma Supply Chain Attack: The Seven-Week Credential Trail — CybelAngel","type":"research","archive_url":"http://web.archive.org/web/20260605112223/https://cybelangel.com/blog/miasma-supply-chain-attack-the-seven-week-credential-trail/","credibility":2,"archive_timestamp":"2026-06-05T11:22:23+00:00"},{"url":"https://www.securityweek.com/teampcp-ups-the-game-releases-shai-hulud-worms-source-code/","name":"TeamPCP Ups the Game, Releases Shai-Hulud Worm's Source Code — SecurityWeek","type":"news_article","archive_url":"http://web.archive.org/web/20260618141203/https://www.securityweek.com/teampcp-ups-the-game-releases-shai-hulud-worms-source-code/","credibility":2,"archive_timestamp":"2026-06-18T14:12:03+00:00"},{"url":"https://www.ox.security/blog/new-actors-deploy-shai-hulud-clones-teampcp-copycats-are-here/","name":"New Actors Deploy Shai-Hulud Clones: TeamPCP Copycats Are Here — OX Security","type":"research","archive_url":"http://web.archive.org/web/20260620150745/https://www.ox.security/blog/new-actors-deploy-shai-hulud-clones-teampcp-copycats-are-here/","credibility":2,"archive_timestamp":"2026-06-20T15:07:45+00:00"},{"url":"https://safedep.io/redhat-cloud-services-hit-by-mini-shai-hulud-npm-worm/","name":"Mini Shai-Hulud 'Miasma: The Spreading Blight' Hits @redhat-cloud-services — SafeDep","type":"research","archive_url":"http://web.archive.org/web/20260712011451/https://safedep.io/redhat-cloud-services-hit-by-mini-shai-hulud-npm-worm/","credibility":2,"archive_timestamp":"2026-07-12T01:14:51+00:00"},{"url":"https://semgrep.dev/blog/2026/miasma-v2-self-spreading-npm-worm-now-uses-malicious-bindinggyp-file-and-compromises-57-packages/","name":"Miasma v2: Self-Spreading npm Worm Now Uses Malicious binding.gyp — Semgrep","type":"research","archive_url":"http://web.archive.org/web/20260609015754/https://semgrep.dev/blog/2026/miasma-v2-self-spreading-npm-worm-now-uses-malicious-bindinggyp-file-and-compromises-57-packages/","credibility":2,"archive_timestamp":"2026-06-09T01:57:54+00:00"},{"url":"https://thehackernews.com/2026/06/ironworm-and-new-miasma-worm-variant.html","name":"IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks — The Hacker News","type":"news_article","archive_url":"http://web.archive.org/web/20260611234719/https://thehackernews.com/2026/06/ironworm-and-new-miasma-worm-variant.html","credibility":2,"archive_timestamp":"2026-06-11T23:47:19+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-06-15T17:42:54.049291+00:00","updated_at":"2026-10-02T06:15:25.783944+00:00"},"source_quality":{"total":34,"tier1":0,"tier2":0,"tier3":0,"unrated":34},"follower_count":null,"content_updated_at":"2026-10-02T05:25:06.365Z","last_fact_checked_at":null,"fact_check_next_allowed_at":null,"update_next_allowed_at":null}