Red Hat npm packages compromised to steal developer credentials