Redhat's entire reason for existence is to prevent this.
did RPM packages get compromised?
not really, no.
did RPM packages get compromised?