Post #4357851

Miasma malware compromised 32 Red Hat npm packages using stolen GitHub credentials, exploiting OIDC trusted publishing and valid SLSA attestations to appear legitimate. https://deafnews.it/en/article/miasma-hits-red-hat-npm-malware-with-valid-slsa-provenance