Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack
Cybersecurity researchers have flagged a new evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family,…
Tag: Endor Labs
Endor Labs: Research on Malware Polling and Execution
Endor Labs, along with OX Security, identified that the Miasma malware polls GitHub hourly for commits matching 'firedalazer' to retrieve and execute…
145 Mastra npm Packages Compromised in Supply Chain Attack, Crypto-Stealer Deployed
On June 17, 2026, a software supply chain attack codenamed 'easy-day-js' compromised 145 npm packages under the @mastra/* namespace, a popular open-source…