serverless

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

A sophisticated supply chain attack, spearheaded by the Miasma malware family (linked to Mini Shai-Hulud and Hades), is targeting npm packages and GitHub Actions workflows. The attackers are leveraging compromised npm pa…