Advertise on podcast: Root Cause

🕵️ What happens when the official build pipeline signs off on a malicious payload? On this episode of Root Cause, the cyber true-crime podcast, host Ian Sterling sits down with Wiz Threat Researcher Gili Tikochinski to dissect the Miasma attack on Red Hat's NPM ecosystem. On June 1, 2026, security dashboards flared as 30+ official Red Hat packages were republished in rapid waves carrying backdoored pre-install scripts. The attack bypassed pull request reviews using parentless orphaned commits, stolen developer credentials, and hijacked OIDC token permissions, all while stamping the malicious releases with valid SLSA provenance. Was this the evolution of Team PCP or a clever copycat exploiting open-source malware? Tune in to follow the forensic trail and discover the single cryptographic slip-up that unmasked the suspect.