Back to article
stepsecurity.io

Miasma NPM Supply Chain Attack: Self-Spreading Worm via Phantom Gyp (opens in new tab)

Covered by 12 sources See all sources covering this story including BleepingComputer, This Week In 4n6Discussed on Hacker News

Covered in 13 articles

BleepingComputer·

New IronWorm malware hits 36 packages in npm supply-chain attack

Discussed on Hacker News
Feeds
This Week In 4n6·

Week 23 – 2026

Feeds
theregister·

GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections

Discussed on Hacker News
Feeds
SecurityWeek·

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

Feeds
safedep.io·

Miasma Worm Targets AI Coding Agents via GitHub Repos

Discussed on Hacker News
Feeds
GitHub·

Ongoing NPM supply chain attack uses binding.gyp to spread like a worm

Discussed on Hacker News
Feeds
thehackernews.com·

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

Feeds
news.smol.ai·

not much happened today | AINews

Feeds
news.smol.ai·

not much happened today | AINews

Feeds
CTO at NCSC·

CTO at NCSC Summary: week ending June 14th

Discussed on Substack
Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help