Red Hat's npm packages compromised, affecting dependent projects

Maintainers of Red Hat Insights' JavaScript client packages discovered malicious code injected into their npm distribution. This is a reminder that supply chain attacks target popular dependencies—even those backed by established companies. Indie developers relying on these packages should audit their dependencies and consider the security posture of tools they build on.