A bad code download steals every password the moment you install it. Red Hat tools are the target.

Hackers hid malware inside a batch of Red Hat npm packages, and it steals your logins the moment you install them.