Security researchers have identified an active supply-chain attack targeting official Red Hat NPM accounts, where compromised packages are deploying a self-spreading worm engineered to exfiltrate deve...