Red Hat npm packages infected with Shai-Hulud worm

Mini Shai-Hulud worm infiltrated 32 Red Hat Cloud Services npm packages. The malware spread via compromised GitHub account of a Red Hat employee. Affected packages are downloaded 80,000 times weekly. Security researchers from Wiz traced the attack to orphan commits in two RedHatInsights repositories. The breach bypassed code review by pushing malicious commits to public repositories.