2026-06-01 · 2026-Q2
Red Hat @redhat-cloud-services npm "Miasma" Worm
Outside the model: Adjacent ecosystem Agent tooling was not the attack surface, so no layer applies.
- Fixable:
- Yes, vendor patch
- Vendor response:
- Patched
- In the wild:
- Yes
Target
At least 32 package releases under the `@redhat-cloud-services` npm namespace (averaging ~80,000 weekly downloads), originating in the RedHatInsights/javascript-clients CI/CD pipeline
Impact
A `preinstall` hook ran an obfuscated `index.js` dropper that steals GitHub tokens, SSH keys, and GCP and Azure cloud identities on developer machines, scrapes GitHub Actions runner memory in CI, and republishes poisoned packages with valid SLSA provenance attestations
Root Cause
A compromised Red Hat employee account injected malicious GitHub Actions workflows that requested an OIDC token via `id-token: write` and abused npm trusted publishing; part of the Shai-Hulud and Miasma lineage. Tracked as Red Hat RHSB-2026-006