🧰 @vapi-ai/server-sdk

The items that name it 6

• jscrambler npm package publishes malicious preinstall binary
  writeupas affected products2026-07-12

  Compromised in the separate Miasma campaign referenced on the page

• Mass npm Supply Chain Attack: 20 Leo Platform Packages Compromised
  writeupas affected products2026-07-01

  Compromised in the Miasma campaign

• Miasma and Hades Are Spreading Now: Detect Them on Developer Machines with Suspicious Files
  articleas affected products2026-06-18

  largest victim of the Miasma npm campaign, more than 408,000 monthly downloads

• Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat
  writeupas affected products2026-06-18

  Package cited as compromised as part of the referenced Miasma campaign

• Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System
  writeupas affected products2026-06-09

  71k weekly downloads, hit by Miasma's spread

• Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp
  writeupas classification.key entities2026-06-04