Dossier
Miasma Worm
Coverage of Miasma Worm in the Nexus archive.
- Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack
The Miasma self-replicating supply chain attack has compromised 73 Microsoft GitHub repositories across four organizations, including Azure, Azure-Samples, Microsoft, and MicrosoftDocs. GitHub has disabled access to the affected repositories in response to the incident.
- IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks
Multiple supply chain attacks targeted the npm ecosystem using malicious and poisoned versions of over 50 legitimate packages to distribute a Rust-based information stealer and a self-spreading worm. JFrog identified the information stealer as hiding behind an eBPF kernel rootkit to scrape secrets from developers' machines.