Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm

A sophisticated credential-stealing worm, leveraging open-sourced supply chain malware, has compromised dozens of official @redhat-cloud-services npm packages by infiltrating GitHub Actions workflows, putting all CI secrets, cloud credentials, and developer tokens at risk and requiring immediate rotation.