Red Hat packages backdoored through its official NPM channel
arstechnica.com
1 thread
List of affected packages: https://github.com/RedHatInsights/javascript-clients/issues/...
List of affected packages: https://github.com/RedHatInsights/javascript-clients/issues/...