Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

Security researchers have discovered Miasma, a new malware campaign targeting software developers through compromised npm packages and GitHub Actions workflows. The attack represents a sophisticated supply chain threat that exploits the developer tools and automation pipelines that programmers rely on daily. This latest campaign highlights the growing risk to software supply chains as attackers increasingly focus on compromising development infrastructure to reach downstream users.