Miasma

GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension

RubyGems Implements Dependency Cooldowns to Combat Supply Chain Attacks

GitHub Actions Enhances Security Against 'Pwn Request' Attacks

Jqwik Developer Embeds Bot-Targeted Code Deletion in Testing Framework

Warning Over “Industrialized” Cyber

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

Chinese

Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets

AI is code – and can't be prompted into being smarter

Malicious Litellm 1 82 8 Analysis

Hades PyPI Supply Chain Attack: 26 Packages Steal Cloud Credentials | Let's Data Science

Miasma Supply Chain Worm Burrows Into 73 Microsoft Repositories

Miasma worm compromises Microsoft GitHub repositories via AI coding tools

Miasma Worm Compromises 73 Microsoft GitHub Repositories

New PyPI Wave in Mini Shai-Hulud, Miasma, and Hades Campaign

Meet Hades: The malware that lies to AI security agents

Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks

Miasma Worm Supply Chain Attack: 73 Microsoft GitHub Repositories Compromised via AI ...

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

Self

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

Endor Labs