Miasma Malware Poisons npm Packages, Targets Developer Secrets

The Miasma malware campaign compromised an npm maintainer account to publish poisoned updates to over 20 packages for LeoPlatform and RStreams. The malware harvests cloud credentials, GitHub tokens, and secrets, then republishes packages using the victim's account, bypassing two-factor authentication.