Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

A sophisticated supply chain attack, spearheaded by the Miasma malware family (linked to Mini Shai-Hulud and Hades), is targeting npm packages and GitHub Actions workflows. The attackers are leveraging compromised npm packages, GitHub Actions secrets, and IDE persistence to steal developer credentials and propagate malicious code across package registries and repositories. This campaign highlights the ongoing threat of supply chain attacks and the need for robust security practices within developer workflows.