NewsThe Hacker News01.06.2026

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from developer machines and deliver a self-propagating worm. "This is effectively a Mini Shai-Hulud campaign: it uses the same core tactics of install-time execution, credential harvesting, CI/CD targeting, encrypted exfiltration, and potential

Other advisories

Not ratedosv:PYSEC-2026-3987MemoryOS 2.0.34 was published with a credential-stealing binary

Other news entries

LiteLLM release pipeline hacked to distribute credential-stealing malwareNewsCSO Online22.10.2026
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of RepositoriesNewsThe Hacker News09.10.2026
Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromiseNewsThe Register — Security08.10.2026
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing WormNewsThe Hacker News08.10.2026
Coder's registry infrastructure compromised to push malicious modulesNewsBleepingComputer03.09.2026
Fake CCleaner downloads turn Chrome into a credential-stealing surveillance toolNewsCSO Online12.08.2026
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ OrganizationsNewsThe Hacker News12.08.2026
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code HooksNewsThe Hacker News04.08.2026

Source: https://thehackernews.com/2026/06/miasma-supply-chain-attack-compromises.html

More on Credential-Stealing

Other advisories

Other news entries