According to the company’s preliminary analysis, a compromised GitHub account was used to push the malicious code out to customers, hitting 32 packages downloaded roughly 117,000 times a week.
First seen on therecord.media
Jump to article: therecord.media/red-hat-removes-tainted-packages-after-software-pipeline-compromise
![]()

