"Threat actors compromised Red Hat's official npm repository channel to distribute malicious packages. The malware, dubbed 'Shai-Hulud', targets CI/CD credentials and sensitive cloud service tokens. Red Hat has removed the malicious packages and is investigating the impact."