Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack
Mini Shai-Hulud-linked malware compromises 23 npm packages and a Verana Go module to steal developer credentials.
More info