{
  "entry": {
    "kind": "vuln",
    "slug": "miasma-npm-worm-compromises-31-red-hat-cloud-services-packages-via-ci",
    "name": "miasma-npm-worm-compromises-31-red-hat-cloud-services-packages-via-ci",
    "vendor": "@redhat-cloud-services",
    "description": "A self-propagating Mini Shai-Hulud variant dubbed \"Miasma: The Spreading Blight\" compromised 31 @redhat-cloud-services npm packages, not via typosquatting but by hijacking the publish pipeline through GitHub Actions OIDC tokens. A preinstall lifecycle hook drops a 4.2 MB obfuscated payload that harvests cloud keys, CI tokens, Vault and Kubernetes credentials, and SSH keys, and actively queries AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager. It injects hooks into Claude, Copilot, and Gemini tooling and disguises exfiltration as traffic to a non-existent api.anthropic.com/v1/api route.",
    "website": "https://cybersecuritynews.com/red-hat-cloud-services-npm-packages/",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": {
      "manager": "npm",
      "packageName": "@redhat-cloud-services",
      "command": null
    },
    "configFiles": null,
    "category": "package",
    "updatedAt": "2026-06-01",
    "risk": {
      "score": 90,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "miasma-npm-worm-compromises-31-red-hat-cloud-services-packages-via-ci",
      "aliases": [
        "ti-032"
      ],
      "title": "\"Miasma\" npm Worm Compromises 31 Red Hat Cloud Services Packages via CI/CD Hijack",
      "summary": "A self-propagating Mini Shai-Hulud variant dubbed \"Miasma: The Spreading Blight\" compromised 31 @redhat-cloud-services npm packages, not via typosquatting but by hijacking the publish pipeline through GitHub Actions OIDC tokens. A preinstall lifecycle hook drops a 4.2 MB obfuscated payload that harvests cloud keys, CI tokens, Vault and Kubernetes credentials, and SSH keys, and actively queries AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager. It injects hooks into Claude, Copilot, and Gemini tooling and disguises exfiltration as traffic to a non-existent api.anthropic.com/v1/api route.",
      "severity": "critical",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Supply chain compromise",
        "Credential theft",
        "Malware"
      ],
      "componentType": "package",
      "component": {
        "name": "@redhat-cloud-services",
        "vendor": null,
        "package": "@redhat-cloud-services",
        "ecosystem": "npm",
        "catalogSlug": null
      },
      "affected": [
        {
          "range": "31 @redhat-cloud-services npm packages (compromised June 1, 2026)",
          "fixed": null
        }
      ],
      "exploited": true,
      "exploitPublic": false,
      "publishedAt": "2026-06-01",
      "modifiedAt": "2026-06-01",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://cybersecuritynews.com/red-hat-cloud-services-npm-packages/"
        }
      ],
      "mitigation": "Uninstall affected packages and reinstall from clean sources. Use npm ci --ignore-scripts in CI. Remove persistence files (kitty-monitor, gh-token-monitor) BEFORE revoking tokens to avoid the dead-man switch. Rotate all cloud, CI, and Git credentials. Rebuild runners from clean images.",
      "detectedByAnomity": false
    }
  }
}