🕵️ Miasma

The items that name it 34

• The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
  articleas classification.key entities2026-10-29
• The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
  writeupas classification.key entities2026-10-29
• Is Claude Code safe for the enterprise? What the official settings cover, and what they don't
  articleas classification.key entities2026-10-22
• The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
  writeupas threat actors2026-09-25It is written here as Miasma (infostealer-like malware targeting CI/CD pipelines, dev servers, build processes; targets Azure files and LiteLLM/GCP ADC paths as TeamPCP LiteLLM supply chain infostealer).

  infostealer-like malware targeting CI/CD pipelines, dev servers, build processes; targets Azure files and LiteLLM/GCP ADC paths as TeamPCP LiteLLM supply chain infostealer

• Socket: When Autonomous Agents Escape
  articleas threat actors2026-08-30

  Active credential-stealing campaign embedding fake prompt-injection headers to fool AI-assisted review tools into marking code as benign

• Shai-Hulud was the best thing to happen to supply chain security
  articleas classification.key entities2026-08-24
• The State of Open Source Supply Chain Attacks
  articleas classification.key entities2026-08-23
• Cloud Threat Highlights: H1 2026
  writeupas threat actors2026-08-06

  Campaign in June 2026 that compromised dozens of packages in the @redhat-cloud-services npm namespace; built on open-sourced Shai-Hulud code, added cloud-identity collectors targeting GCP and Azure metadata services, and generated a uniquely encrypted payload per infection so no two compromised pack

• npm-scan
  repoas threat actors2026-08-05

  Real campaign used to validate npm-scan detectors

• PolinRider Caused Dozens of npm, Go, PHP Compromises
  writeupas threat actors2026-07-31

  Cited as a notorious worm example, contrasted with PolinRider.

• NPM Implements Pre-Publication Malware Scanning, But Will It Work?
  articleas threat actors2026-07-31

  Malware campaign that landed on npm despite npm's existing scanning

• OpenSourceMalware Blog
  articleas threat actors2026-07-18

  npm worm, open-sourced; targets Red Hat via trusted publishing abuse; suspected cause of Microsoft/Azure repo takedowns for terms-of-use violation investigation.

• The OpenSourceMalware Show #13
  talkas threat actors2026-07-16

  Malware family open-sourced earlier in the year (around late May/June per episode); components of it were used in the AsyncAPI compromise; described as having evolved/changed meaning since being open-sourced

• Introducing Secret Exfiltration Protection for GitHub Actions
  articleas threat actors2026-07-16

  June 2026; planted configuration files that ran a credential harvester when a repository was opened in an AI coding tool (Claude Code, Cursor, VS Code). Reached Microsoft's Azure organizations, prompting GitHub to disable 73 repositories to contain it.

• Socket: npm v12 Ships With Install Scripts Off by Default
  articleas threat actors2026-07-15

  Attack wave, including 'Phantom Gyp' waves, that used a small binding.gyp file to run code during npm install with no lifecycle script in package.json, slipping past scanners watching only preinstall/postinstall fields; tracked across multiple waves by Socket's team

• M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions
  writeupas classification.key entities2026-07-14
• jscrambler npm package publishes malicious preinstall binary
  writeupas classification.key entities2026-07-12
• Mass npm Supply Chain Attack: 20 Leo Platform Packages Compromised
  writeupas classification.key entities2026-07-01
• Socket: Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
  writeupas classification.key entities2026-06-27
• Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets
  writeupas threat actors2026-06-24

  Credential stealing toolkit leaked publicly on Jun 10, 2026. Avoids a traditional C2 server; instead periodically searches GitHub's public commit search API for a dead-drop marker string (e.g. thebeautifulsnadsoftime), treats the attached payload found in matching commits as a signed command, and ru

• JFrog: npm v12
  articleas classification.key entities2026-06-18
• Miasma and Hades Are Spreading Now: Detect Them on Developer Machines with Suspicious Files
  articleas threat actors2026-06-18

  Self-replicating worm spreading via npm; uses a malicious binding.gyp file (the "Phantom Gyp" technique) to trigger code execution during npm install through the native build step, bypassing install-script security checks; also infects repositories so payload runs when a folder is opened in an IDE o

• Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat
  writeupas classification.key entities2026-06-18
• Socket: npm Package Uses Prompt Injection + Token Flooding to Evade AI Malware Scanners
  writeupas threat actors2026-06-17

  Related campaign, alongside Mini Shai-Hulud and Hades, using fake prompt-injection headers preceding obfuscated JS payloads.

• Miasma & Hades Worms
  writeupas threat actors2026-06-10

  Campaign name associated with this supply chain attack wave, tracked on a dedicated campaign tracking page with 471 affected artifacts across npm and PyPI (411 npm artifacts across 106 packages, 60 PyPI artifacts across 37 packages)

• Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System
  writeupas threat actors2026-06-09

  Added a malicious preinstall script to compromised npm packages that ran node index.js at install time, harvesting cloud credentials, CI tokens, SSH keys, and more. Hit 32 official Red Hat packages on npm, then spread to other packages across npm, PyPI, and GitHub. A new variant moved its trigger fr

• Miasma Blight Reaches Microsoft: 73 Repos Disabled in 105 Seconds
  writeupas threat actors2026-06-06

  adds dedicated Azure and GCP credential collectors (Azure CLI auth caches, managed-identity tokens); propagates by creating public GitHub repos titled 'Miasma: The Spreading Blight' and committing harvested secrets as JSON; execution signature is a preinstall script invoking Bun against an obfuscate

• Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp
  writeupas classification.key entities2026-06-04
• The OpenSourceMalware Show #7
  talkas classification.key entities2026-06-03
• Orca Security: Red Hat npm Packages Compromised in Supply-Chain Attack Spreading Credential-Stealing Worm
  articleas classification.key entities2026-06-02
• Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
  writeupas threat actors2026-06-01

  New variant of Mini Shai-Hulud used in the June 1, 2026 @redhat-cloud-services npm compromise; replaces the Dune references of Shai-Hulud with Greek mythology references

• Miasma: Supply Chain Attack Targeting RedHat npm Packages
  writeupas threat actors2026-06-01

  Supply chain attack campaign targeting @redhat-cloud-services npm packages, first identified 1 June 2026; malware creates repositories with description 'Miasma: The Spreading Blight'; a 'Miasma - The Spreading Blight' variant seen in a new wave described in the June 4, 2026 update abusing binding.gy

• Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages
  writeupas classification.key entities2026-06-01
• Compromised npm Packages in the AsyncAPI Namespace Deliver Miasma Botnet Loader
  writeupas classification.key entities