TGViewer
Programming Programming @programmingreddit · 905 subscribers
Post #13219 104
@redhat-cloud-services publish pipeline is compromised today and shipped a signed, trusted, malicious npm package
https://safedep.io/redhat-cloud-services-hit-by-mini-shai-hulud-npm-worm/

https://redd.it/1ttt4p4
@programmingreddit
SafeDep - Real-time Open Source Software Supply Chain Security Mini Shai-Hulud "Miasma: The Spreading Blight" Hits @redhat-cloud-services: Multiple Packages at Risk The attacker compromised the @redhat-cloud-services GitHub Actions OIDC trusted publisher to ship patch-client@4.0.4 with a Mini Shai-Hulud worm. The same…
Open in Telegram All posts from @programmingreddit
More from @programmingreddit
  1. Sep 28, 2026Packing Binary Is Fun, Actually https://hereticpleb.vercel.app/blog/packing-binary-is-fun-…
  2. Sep 27, 2026Don't couple your Go code to GitHub https://iain.rocks/blog/dont-couple-your-go-code-to-gi…
  3. Sep 27, 2026Postgres AT TIME ZONE 'UTC' does NOT do what you think it does https://bookofrevenue.com/b…
  4. Sep 26, 2026Optimizing a Lock-Free Ring Buffer https://david.alvarezrosa.com/posts/optimizing-a-lock-f…
  5. Sep 25, 2026Microservices are organizational debt disguised as architecture. https://martinfowler.com/…
  6. Sep 25, 2026We still maintain a development tool first released in 1993. Here’s what 30+ years of back…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →