Multiple open source supply chain compromises (March 2026)

Issue

Beginning in March 2026, multiple widely-used open source projects were impacted by supply chain attacks

Any environment using the affected project, such as BerriAI LiteLLM, Aqua Security Trivy, Checkmarx GitHub Actions, Telnyx, Axios, and various npm packages

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Here are the common uses of Markdown.

Code blocks

~~~
Code surrounded in tildes is easier to read
~~~

Links/URLs

[Red Hat Customer Portal](https://access.redhat.com)