Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family that has compromised a new set of npm packages, even as it has propagated to the Go ecosystem. “The latest activity includes malicious npm releases …

View Post on Scour ↗

More from The Hacker News on Scour.

Covers Mass npm Supply Chain Attack: 20 Leo Platform Packages Compromised