--- title: "Red Hat npm supply chain attack hits 32 packages, Instagram AI chatbot exploited for account takeover" url: https://daily.dev/posts/red-hat-npm-supply-chain-attack-hits-32-packages-instagram-ai-chatbot-exploited-for-account-takeove-z02oxbkwf source_url: https://daily.dev/posts/red-hat-npm-supply-chain-attack-hits-32-packages-instagram-ai-chatbot-exploited-for-account-takeove-z02oxbkwf type: freeform source: "Security Digest" published: 2026-06-02T04:19:28.742Z updated: 2026-06-02T04:19:50.234Z tags: ["security", "vulnerability", "github-actions", "npm"] reading_time: 5 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Red Hat npm supply chain attack hits 32 packages, Instagram AI chatbot exploited for account takeover **[Security Digest](https://daily.dev/sources/security_digest)** · 5 min read · 0 upvotes · 0 comments ## Summary A security-focused roundup covering several major incidents and vulnerabilities. A credential-stealing worm dubbed Miasma backdoored 32 official Red Hat npm packages via a compromised GitHub employee account, abusing GitHub Actions OIDC tokens to publish malicious versions with valid SLSA provenance; affected CI environments should rotate all credentials immediately. Meta's AI support chatbot was exploited to hijack Instagram accounts at scale — including the Obama White House handle — by social-engineering the bot into adding attacker-controlled emails and bypassing 2FA. Nine X.Org Server CVEs were patched, eight discovered via AI-assisted research. A CVSS 10 RCE in LiquidJS (7.3M monthly downloads) allows arbitrary command execution via prototype manipulation — upgrade to 10.26.0 immediately. Also covered: active exploitation of Windows Netlogon RCE, Palo Alto GlobalProtect auth bypass, WP Maps Pro privilege escalation, Oracle's new monthly patch cycle with a CVSS 10 flaw, and Pwn2Own Berlin 2026 results where AI products fell on day one. ## Content **TLDR:** A credential-stealing worm called Miasma compromised 32 official @redhat-cloud-services npm packages on June 1, using a hijacked Red Hat employee GitHub account to push malicious GitHub Actions workflows that published backdoored versions with valid SLSA provenance. The malware sweeps for AWS, GCP, Azure, Kubernetes, Vault, SSH keys, and more, then self-propagates by republishing packages using stolen tokens. Separately, Meta's AI support chatbot was exploited to take over Instagram accounts at scale — including the Obama White House handle — by social-engineering the bot into sending verification codes to attacker-controlled emails, bypassing 2FA entirely. Nine new X.Org Server vulnerabilities were patched, eight of them found by AI-assisted research. --- ## Miasma worm backdoors 32 Red Hat npm packages via compromised GitHub Actions pipeline On June 1, attackers compromised a Red Hat employee's GitHub account and injected malicious orphan commits into the RedHatInsights/javascript-clients repo. The workflows abused GitHub Actions OIDC tokens to publish backdoored versions of 32 @redhat-cloud-services packages — with valid SLSA provenance attestations, so naive provenance checks won't save you. The 4.2 MB obfuscated preinstall payload sweeps for AWS, GCP, Azure, Kubernetes, HashiCorp Vault, GitHub Actions secrets, SSH keys, Docker credentials, npm/PyPI tokens, and .env files, then self-propagates using stolen tokens to compromise additional packages. Combined weekly downloads across affected packages were roughly 80,000–117,000. Red Hat says no enterprise products were impacted due to version pinning, but any CI environment that ran npm install against affected versions should be treated as fully compromised: rotate all credentials immediately, audit GitHub for unauthorized repos and workflows, and hunt for branches named 'chore/add-codeql-static-analysis' as an IOC. [Read more](https://app.daily.dev/feed-by-ids?id=Q3mbZ24Yd&id=mpTfkMIuW&id=bzd1MUxSa&id=4Kacs0E4h&id=jLxGALOM3&id=PrnO3btx5&id=IF43c4tVr&id=l4Anv31dE&id=Imn47QmZ8&id=suwBrjHCV) ## Meta's AI support chatbot exploited to hijack Instagram accounts, bypassing 2FA Attackers social-engineered Meta's AI Support Assistant into adding attacker-controlled email addresses to target Instagram accounts, then used the resulting verification codes to trigger password resets — no identity verification required. A VPN was used to spoof a local IP, which appears to have been enough to make the bot treat requests as legitimate. Compromised accounts included the Obama-era White House Instagram and a US Space Force official's account, with links to pro-Iranian groups. Meta pushed an emergency patch and confirmed the issue resolved Monday. Accounts with any MFA enabled were immune to this specific attack. The broader problem is structural: an AI chatbot with account-level write permissions operates at a scale and speed no human support team could match, and it has no intuition to flag suspicious conversation patterns. Instagram's Trust and Safety org reportedly lost around 60% of staff through layoffs and reassignments to data labeling in the weeks prior, while aggressive AI feature pushes introduced bugs to production. [Read more](https://app.daily.dev/feed-by-ids?id=ehnDbVpJ3&id=dpi6fPu3x&id=VtlSgFruq&id=LRpaaxZaY) ## Nine X.Org Server CVEs patched, eight found by AI-assisted research Patched releases xorg-server 21.1.23 and xwayland 24.1.12 fix nine vulnerabilities including stack-based buffer overflows, use-after-free bugs, and out-of-bounds read/write issues. Eight of the nine were found by Trend Micro's TrendAI Zero Day Initiative using AI-assisted tooling — the same pattern driving the Linux AF_ALG deprecation and the PostgreSQL CVE spike from last week. Legacy codebases with decades of accumulated C are proving to be rich targets for AI-powered fuzzing and static analysis. If you're running X.Org in any production or shared environment, update now. [Read more](https://app.daily.dev/posts/bvrizl9GD) ## CVE-2026-45618: CVSS 10 RCE in LiquidJS affects 7.3M monthly npm downloads A critical RCE flaw in LiquidJS, the Node.js Liquid template engine, allows attackers to reach the Function constructor via the valueOf filter and prototype manipulation, then execute arbitrary commands via child_process.execSync — no authentication required and a public PoC already exists. All versions prior to 10.26.0 are affected. With 7.3 million monthly downloads, this has a wide blast radius. Upgrade to 10.26.0 immediately; if you can't patch, restrict template input from untrusted sources as a stopgap. [Read more](https://app.daily.dev/posts/80y8SP5mi) --- ## Also notable - **CVE-2026-41089: Windows Netlogon RCE now actively exploited in the wild:** Belgium's CCB confirmed active exploitation of this critical stack-based buffer overflow in Windows Netlogon, which allows unauthenticated RCE on domain controllers across all supported Windows Server versions including Server 2025 — Microsoft patched it in May 2026 Patch Tuesday, so if you haven't applied it yet, that window has closed. [Read more](https://app.daily.dev/posts/ZyueyB492) - **Palo Alto GlobalProtect CVE-2026-0257 auth bypass under active exploitation, CISA KEV listed:** Rapid7 observed exploitation starting May 17 from Vultr-hosted infrastructure; the root cause is PAN-OS trusting decrypted auth override cookie contents without signature verification, and if the same certificate is shared between HTTPS services and the auth override feature — a common config — attackers can forge valid cookies and bypass VPN authentication entirely. [Read more](https://app.daily.dev/posts/akuP0u3R2) - **CVE-2026-8732: WP Maps Pro privilege escalation actively exploited, 15,000+ sites affected:** Unauthenticated attackers can create WordPress admin accounts in a single request against WP Maps Pro 6.1.0 and older via a publicly visible nonce — Defiant blocked over 3,600 exploitation attempts within 24 hours of disclosure, and because the plugin is distributed through Envato rather than the official WordPress directory, automatic updates don't apply, so manual patching to 6.1.1 is required. [Read more](https://app.daily.dev/posts/I69gHuwaM) - **Oracle launches monthly patch cadence with 35 fixes, including CVSS 10 in REST Data Services:** Oracle's new 'third Tuesday' monthly CSPU cycle debuts with CVE-2026-46840, a CVSS 10 unauthenticated flaw in Oracle REST Data Services, plus several older vulnerabilities with public PoC exploit code — cloud customers get patches automatically, but on-premises deployments need immediate attention. [Read more](https://app.daily.dev/posts/lTLKKFlSu) - **Pwn2Own Berlin 2026: 47 zero-days, $1.3M in payouts, AI products fall on day one:** OpenAI Codex, LiteLLM, LM Studio, and NVIDIA Megatron Bridge all fell to what researchers are calling the 'trust boundary problem' — AI tools unconditionally trusting external tools and protocols — while Microsoft Exchange yielded a SYSTEM-level RCE chain and VMware ESXi produced a cross-tenant guest-to-host escape, with AI-assisted research tools used by the majority of competing teams. [Read more](https://app.daily.dev/posts/xFYxuYPgZ) ## Similar posts on daily.dev - [Red Hat npm Packages Compromised in Supply-Chain Attack Spreading Credential-Stealing Worm](https://daily.dev/posts/red-hat-npm-packages-compromised-in-supply-chain-attack-spreading-credential-stealing-worm-q3mbz24yd) · Orca Security Blog · 0 upvotes · 0 comments - [Red Hat npm packages compromised to steal developer credentials](https://daily.dev/posts/red-hat-npm-packages-compromised-to-steal-developer-credentials-mptfkmiuw) · BleepingComputer · 0 upvotes · 0 comments - [Infected Red Hat npm packages expose developer credentials](https://daily.dev/posts/infected-red-hat-npm-packages-expose-developer-credentials-0whtg9b9m) · CSO Online · 0 upvotes · 0 comments - [Miasma Attack Hits Red Hat npm Packages](https://daily.dev/posts/miasma-attack-hits-red-hat-npm-packages-bzd1muxsa) · Snyk · 0 upvotes · 0 comments - [Dozens of Red Hat packages backdoored through its offical NPM channel](https://daily.dev/posts/dozens-of-red-hat-packages-backdoored-through-its-offical-npm-channel-jkig82lzz) · Ars Technica · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#vulnerability](https://daily.dev/tags/vulnerability), [#github-actions](https://daily.dev/tags/github-actions), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/red-hat-npm-supply-chain-attack-hits-32-packages-instagram-ai-chatbot-exploited-for-account-takeove-z02oxbkwf)