Security
Miasma malware infects 20+ npm packages in 3-second attack
Attackers compromised an npm maintainer account to publish malicious updates to over 20 packages in the Leo Platform and RStreams ecosystems, stealing cloud credentials, GitHub tokens, and other secrets while evading two-factor authentication.