What the Miasma campaign reveals about the new supply chain threat model and the underground market for developer credentials (opens in new tab)

A stolen session cookie sat in underground markets for seven weeks before attackers used it to poison 32 Red Hat packages in the npm software registry, an example of the industrial approach behind modern supply chain attacks.Key takeawaysMiasma is a self-propagating npm worm derived from that TeamPCP open-sourced on May 12. The public release of the full weaponized toolchain means any operator can now replicate structurally identical supply chain campaigns.The Miasma campaign compromised 89-p...