Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

Hackers Abuse GitHub Actions to Backdoor AsyncAPI npm Packages With Miasma RAT

Cybersecurity NewsJuly 21, 20264 min read

A supply chain attack has pushed Miasma malware into trusted AsyncAPI npm packages, putting developer systems and automated build environments at risk. Attackers used a compromised release process to publish malicious code through the project’s legitimate npm namespace. The affected packages had a combined reach of about 2.9 million weekly downloads, although download figures do […] The post Hackers Abuse GitHub Actions to Backdoor AsyncAPI npm Packages With Miasma RAT appeared first on Cyber Security News.

A supply chain attack has pushed Miasma malware into trusted AsyncAPI npm packages, putting developer systems and automated build environments at risk. Attackers used a compromised release process to publish malicious code through the project’s legitimate npm namespace. The affected packages had a combined reach of about 2.9 million weekly downloads, although download figures do not confirm infections. The campaign is concerning because these tools can run inside development workstations,…

Excerpt shown under the publisher's RSS terms · 70 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article