Miasma Malware Hits 32 Red Hat Packages via Compromised GitHub Account

Multiple active incidents and campaigns reported: Miasma malware compromised a compromised GitHub account to inject malicious code into 32 Red Hat npm packages, exposing cloud tokens, CI/CD secrets and developer credentials in a supply‑chain attack. Related npm risks include Lazarus Group brandjacking packages to target developers. macOS users face a new Reaper infostealer (SHub variant) that abuses Script Editor to bypass protections and steal crypto and passwords. Significant data breaches were disclosed: Atlas Menu leak (≈64,000 cheat‑service users) and an iFood breach affecting ~1.2M users