# Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm

DevFeed: [Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm](<https://devfeed.tech/articles/red-hat-npm-packages-compromised-to-spread-a-credential-stealing-worm-51647.md>)

Original publisher: [Read original article](<https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm>)

Author: Ilyas Makari

Published: 2026-06-01T13:39:00Z

Content type: news

Language: en

Sources: [Aikido Security's Blog](<https://devfeed.tech/sources/aikido-security-s-blog.md>)

Topics: [software supply-chain attack](<https://devfeed.tech/topics/software-supply-chain-attack.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [npm packages](<https://devfeed.tech/topics/npm-packages.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>)

Tags: [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [credentials](<https://devfeed.tech/tags/credentials.md>), [github](<https://devfeed.tech/tags/github.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [malware](<https://devfeed.tech/tags/malware.md>), [npm-packages](<https://devfeed.tech/tags/npm-packages.md>), [shai-hulud](<https://devfeed.tech/tags/shai-hulud.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>)

## AI overview

Multiple official Red Hat npm packages were compromised by a credential-stealing worm derived from the open-sourced Mini Shai-Hulud malware. The attack was published through GitHub Actions OIDC, indicating a compromised CI/CD pipeline, and may expose CI secrets, cloud credentials, SSH keys, and npm tokens.

## Source excerpt

Multiple official @redhat-cloud-services npm packages were compromised with a credential-stealing worm derived from the open-sourced Mini Shai-Hulud malware, targeting cloud credentials, and developer tooling across CI/CD pipelines. Category: Vulnerabilities & Threats