Red Hat npm Scope Backdoored to Steal Cloud Secrets

Red Hat, a leading open-source technology company, suffered a supply chain attack where attackers backdoored 32 packages within its official npm scope. The breach was publicly disclosed in June 2026, though the exact discovery date is not specified. The incident targeted cloud and CI secrets, potentially affecting downstream users of these packages.

The attack vector was a supply chain compromise, with threat actors injecting malicious code into Red Hat's npm packages. The backdoored packages were designed to exfiltrate cloud and CI secrets from environments where they were installed. No specific CVE identifiers or threat actor attribution were provided in the article.

No post-incident details such as regulatory actions, litigation, or remediation milestones were mentioned in the article.