Days after IBM and Red Hat announced a master security plan for open-source software, Red Hat suffers a major breach of its ...

Researchers have uncovered a new Shai-Hulud malware variant targeting Red Hat-related npm packages, spreading through ...

A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with infostealer malware called IronWorm. The malware targets 86 environment variables (key-value pairs) and ...

Compromised npm packages targeted Red Hat cloud services, enabling credential theft and expanding supply chain risks.

A malware named IronWorm spread through 36 npm packages in the Arweave ecosystem, stealing developer credentials and self ...