Multiple official @redhat-cloud-services npm packages were compromised with a credential-stealing worm derived from the open-sourced Mini Shai-Hulud malware, targeting cloud credentials, and developer tooling across CI/CD pipelines.
  • some_guy@lemmy.sdf.orgEnglish
    5·
    8 hours ago

    Oh, cool! Red Hat! The people who run a company charging for support. This makes me feel very safe.

    Ever since the ssh thing, but especially in the last few months, I really don’t feel safe with anything on the internet.