someone actually leaked the Miasma supply chain attack toolkit source code on github (opens in new tab)

The Miasma worm source code appeared on GitHub through compromised developer accounts. The codebase is a full supply chain attack toolkit with credential exfiltration across AWS, Azure, GCP, and Kubernetes, registry infection for npm, PyPI, and RubyGems via stolen tokens and OIDC trusted publishing, GitHub Actions tag hijacking, AI coding tool config poisoning, and a GitHub commit search based C2 infrastructure.