Malicious npm packages detected across Red Hat Cloud Services

Salam

Fucking Microsoft

[dead]

[flagged]

[flagged]

[dead]

[dead]

[dead]

[dead]

Why blame on NPM? Would you blame GitLab if an opensource maintainer was hacked and as a result the repo contains malicious changes?

All of these recent incidents is just developers doing stupid things ... like using their compromised devices for making production changes, which is basically a big red flag to begin with.

In fact, the entire situation has been exacerbated by coding agents because now practically everything happens on a single device that touches hundreds of different production systems with full production credentials.