Miasma worms its way onto GitHub as attack kit goes open source

The article reports that the Miasma supply-chain worm toolkit was publicly released on GitHub, enabling package registry poisoning and GitHub-native command-and-control; it leverages stolen personal access tokens (PATs) encrypted in commit messages, delivers immediate JavaScript via commit checks, and fetches Python persistence scripts, with hundreds of package artifacts already impacted and serious detection challenges for defenders.