Dozens of Backdoored Packages Found in Red Hat’s Official NPM Channel

Dozens of packages containing backdoors have been discovered in Red Hat’s official NPM repository. Attackers gained access to the distribution channel and modified the source code of components used by developers worldwide.

The compromised packages may include malicious code capable of executing unauthorized actions on users' devices. Red Hat has already removed the problematic versions from the repository, but experts recommend auditing all dependencies in projects that utilized these libraries.

Security experts note that the attack may have gone undetected for an extended period, as changes were introduced through legitimate updates. At-risk groups include companies and developers who do not employ strict integrity verification mechanisms for downloaded software.

Red Hat has issued guidelines for detecting and removing infected packages, including verifying file checksums and updating dependencies to the latest secure versions. The incident underscores the critical need for multi-layered protection in software supply chains.