{"id":282399,"date":"2026-06-26T07:05:00","date_gmt":"2026-06-26T11:05:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/06\/26\/miasma-malware-targets-npm-packages-and-github-actions-in-supply-chain-attack\/"},"modified":"2026-06-26T08:50:37","modified_gmt":"2026-06-26T12:50:37","slug":"miasma-malware-targets-npm-packages-and-github-actions-in-supply-chain-attack","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/06\/26\/miasma-malware-targets-npm-packages-and-github-actions-in-supply-chain-attack\/","title":{"rendered":"Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack"},"content":{"rendered":"

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack<\/a><\/p>\n

https:\/\/thehackernews.com\/2026\/06\/miasma-malware-targets-npm-packages-and.html<\/a><\/p>\n

Publish Date: 2026-06-26 07:05:00<\/a><\/p>\n

Source Domain: thehackernews.com<\/a><\/p>\n

Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family that has compromised a new set of npm packages, even as it has propagated to the Go ecosystem.<\/p>\n

“The latest activity includes malicious npm releases affecting LeoPlatform and RStreams packages, GitHub Actions workflow abuse, and a related Go module compromise involving the Verana Blockchain project,” Socket said.<\/p>\n

The end goal of the campaign, as before, is to harvest developer or maintainer credentials and weaponize the stolen data to spread across package registries, repositories, and trusted developer workflows.<\/p>\n

The list of affected packages is below –<\/p>\n