The ‘Miasma’ worm source code briefly leaked on GitHub

Miasma, a worm‑like credential‑stealing framework that targets developer machines and open‑source supply chains, was deliberately published on GitHub; it harvests cloud, CI/CD, password manager and secret store credentials, abuses them to trojanize npm/PyPI/RubyGems packages and GitHub repositories/workflows, uses GitHub as its C2 channel, includes a destructive dead‑man switch that can wipe user data, and employs a multi‑stage, per‑build obfuscation/encryption pipeline to evade detection — the leak is likely to increase supply‑chain attacks and developers are advised to pin dependencies, delay adoption of new packages, and validate builds in isolated environments.