Threat Intelligence | Red Hat Cloud Services npm Package Supply Chain Poisoning

Background Recently, the MistEye security monitoring system detected intelligence indicating anomalous versions of multiple npm packages under the Red Hat Cloud Services organization. This incident involves a total of 32 npm packages and 96 versions under the organization. This article selects three local samples for in-depth offline analysis. These samples are neither impersonated namespaces nor typo-squatting packages; rather, they are legitimate package versions published…