On June 1, 2026, researchers reported that malicious versions of multiple npm packages under Red Hat’s @redhat-cloud-services namespace had been published with install-time code designed to steal developer, cloud, and CI/CD credentials. The campaign, now being tracked as Miasma, is not...