Tag: slsa provenance forgery

1 Attack Reports | 0 Vulnerabilities

Attack reports

Preinstall to persistence: Inside the npm Miasma credential-stealing campaign

Microsoft Threat Intelligence discovered a large-scale npm supply chain attack compromising 32 malicious packages across over 90 versions under the @redhat-cloud-services scope. The compromise originated from the RedHatInsights/javascript-clients CI/CD pipeline, enabling attackers to publish trojan…
supply chain attack
github actions
2026-06-04
oidc workflow abuse
slsa provenance forgery
Published: June 4, 2026
Downloadable IOCs: 6
Click here to see more Attack Reports