🚨 npm Supply Chain Attack Alert: Red Hat Cloud Services Packages Massively Compromised SlowMist has detected an active supply chain attack targeting @redhat-cloud-services, affecting over 31 npm packages with over 116,000 weekly downloads and exposing credentials from 300+ GitHub repositories. The attack technique closely resembles the previous Shai-Hulud campaign, spreading through credential theft, malicious repository creation, and automated secret exfiltration. Developers may face risks of stolen GitHub/npm tokens, AWS/GCP/Azure cloud credentials, SSH keys, and wallet data. We recommend immediately downgrading or removing affected package versions, conducting a full audit of CI/CD pipelines, rotating all related keys, and rebuilding development environments from clean images.