DevThe Register4 days ago
Miasma campaign poisons 20-plus npm packages, hunts for developer secrets
2 min read
Microsoft says the Miasma malware campaign poisoned over 20 npm packages used by Leo Platform and RStreams. The attack compromised the maintainer account "czirker" and published updates in under three seconds. The malware hunts for cloud credentials, GitHub tokens, and Kubernetes secrets, then republishes packages to spread.
Level
Hype check
Tap to vote and see what everyone thinks.