Miasma Malware Uses binding.gyp and Bun to Execute Hidden Payloads in npm Packages
Supply chain attackers are getting more creative, and the latest threat is proof of that. A malware campaign known as Miasma has been caught hiding inside widely used npm packages, using a clever mix of tools and techniques to stay hidden while stealing sensitive developer credentials. The attack...