npm package poisoning

The npm package poisoning tag on WindowsForum.com covers supply chain attacks where malicious code is injected into legitimate npm packages. A notable incident discussed is the Red Hat npm Miasma campaign, disclosed by Microsoft Threat Intelligence in June 2026. Attackers compromised the RedHatInsights/javascript-clients CI/CD pipeline and published 32 malicious @redhat-cloud-services packages across over 90 versions. The attack exploited a trusted GitHub Actions OIDC publishing workflow, turning provenance into camouflage. This tag explores how attackers steal credentials, reuse publishing rights, and poison packages through trusted infrastructure, highlighting the evolving threat to software supply chains.