Credit: The original article is published here.
Security researchers spotted a new campaign using the same methods as TeamPCP.
Compromised Red Hat npm packages downloaded over 80,000 times in one week – supply chain attack still ongoing
![[Aggregator] Downloaded image for imported item #140776](https://kcmicro.com/wp-content/uploads/2026/06/2viAsX89eJReYQEQ3i3SwH-1280-80.jpg "[Aggregator] Downloaded image for imported item #140776")
![[Aggregator] Downloaded image for imported item #140779](https://kcmicro.com/wp-content/uploads/2026/06/vJGDzTrHxJbqn89tr9JGxP-1280-80-800x500.png "[Aggregator] Downloaded image for imported item #140779")
![[Aggregator] Downloaded image for imported item #68780](https://kcmicro.com/wp-content/uploads/2025/11/fg7bgy65pWhFo4Qzib58yX-1280-80-1-800x500.jpg "[Aggregator] Downloaded image for imported item #68780")