#miasma

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

Jun 26, 2026 // 14:08

Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family that has compromised […]

The ‘Miasma’ worm source code briefly leaked on GitHub

Jun 10, 2026 // 23:36

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub. Miasma appears to be an evolution […]

Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues

Jun 9, 2026 // 19:37

Microsoft on Monday confirmed that it temporarily removed some GitHub repositories in response to a recent security incident that led to 73 of its open-source […]

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

Jun 6, 2026 // 11:48

Microsoft’s GitHub repositories have become the latest to fall victim to the ongoing Miasma self-replicating supply chain attack campaign. The incident impacted 73 Microsoft repositories […]

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

Jun 5, 2026 // 23:42

Multiple software supply chain attacks have hit the npm ecosystem, with threat actors using both malicious and poisoned versions of over 50 legitimate packages to […]

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Jun 1, 2026 // 22:14

A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from developer machines and deliver a […]