Miasma campaign poisons 20-plus npm packages, hunts for developer secrets

▤ Summary

The article covers the Miasma campaign, which has compromised more than 20 npm packages. The malicious packages appear designed to search developer environments for secrets and credentials. This makes the story relevant to software teams that rely on open-source dependency ecosystems and developer tooling. It also highlights a broader supply-chain security risk for organizations that publish or consume Node.js packages.

▦ Linked Companies