SecurityThe Hacker Newsabout 2 hours ago
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
1 min read
Four compromised @asyncapi npm packages deliver a multi-stage botnet loader called Miasma. The malware supports six C2 channels including HTTP, Nostr relay, IPFS, BitTorrent DHT, libp2p GossipSub, and Ethereum smart contract. It enables credential theft, AI tool poisoning, and worm-like propagation across npm, PyPI, and Cargo registries.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
