---
id: 6823
title: "Miasma: Supply Chain Attack Targeting RedHat npm Packages"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages"
published_at: "2026-06-01T12:45:51Z"
tags: ["cloud", "supply-chain", "malware", "npm", "supply-chain-attack", "shai-hulud", "redhat-cloud-services", "cloud-identities"]
phying_url: "https://phying.com/item/6823"
lang: en
---

# Miasma: Supply Chain Attack Targeting RedHat npm Packages

## Summary

Wiz Research found Miasma, a supply-chain attack on @redhat-cloud-services npm: 32+ tampered releases (~80k weekly downloads) carried a Shai-Hulud-derived payload targeting GCP and Azure identities.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2026-06-01T12:45:51Z
- **Original:** https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages
- **Phying News:** https://phying.com/item/6823