Red Hat

Overview

Red Hat is an enterprise open-source software company (owned by IBM) known for Linux distributions, Kubernetes platforms (OpenShift), and cloud services. Its @redhat-cloud-services npm scope publishes JavaScript client libraries for Red Hat Insights and cloud management APIs.

Recent Developments

• 2026-08-04: Launches asago open-source ai-governance-orchestration (Apache 2.0); formation phase; maps to nist-ai-rmf / eu-ai-act (2026-08-04-red-hat-asago-open-source-ai-governance)
• 2026-06-01: Supply chain attack — 30+ @redhat-cloud-services npm packages compromised with miasma-worm. Compromised Red Hat employee GitHub account used to hijack CI/CD via GitHub Actions OIDC trusted publishing. Red Hat issued advisory RHSB-2026-001.

Attack Impact

• ~80,000 weekly cumulative downloads across affected packages
• Valid SLSA provenance attestations on malicious packages
• Packages include frontend-components, rbac-client, insights-client, compliance-client, and 27 others

Related

• miasma-worm
• supply-chain-attacks
• github-security
• cybersecurity

Sources

• 2026-06-01-red-hat-npm-aikido-primary
• 2026-06-01-red-hat-npm-wiz-research