Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security,…
Tag: Miasma
GhostApproval Symlink Flaws Let Malicious Repos Execute Code in AI Coding Assistants
Security researchers at Wiz have identified a critical vulnerability pattern, dubbed GhostApproval, affecting six popular AI coding assistants. The flaw allows a…
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack
Cybersecurity researchers have flagged a new evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family,…
Miasma Malware: Multi-Stage Botnet Loader with Advanced C2 Capabilities
Miasma is a multi-stage botnet loader identified in compromised AsyncAPI npm packages. It features a tasking framework with 744 modules, supporting six…
Mini Shai-Hulud Malware: Persistent Threat to Package Registries
Mini Shai-Hulud is a malware variant linked to the Miasma family, known for evolving indicators to evade detection. It has been observed…
Endor Labs: Research on Malware Polling and Execution
Endor Labs, along with OX Security, identified that the Miasma malware polls GitHub hourly for commits matching 'firedalazer' to retrieve and execute…