1 min read
You Might Also Like
4 min readFor Security Engineers
Miasma Worm Leak: When GitHub Became the Distribution Channel
What Happened The Miasma worm s source code was deliberately distributed on GitHub through compromised developer accounts. Unlike accidental exposures or proof-of-concept leaks, this was a targeted at
Read
5 min readFor Security Engineers
84 npm Packages Poisoned Despite SLSA L3
On May 11, 2026, attackers published 84 malicious npm packages across 42 @tanstack repositories. Each package carried cryptographically valid SLSA Build Level 3 attestations. If your team relies on SL
Read
5 min readFor Security Engineers
Microsoft Removed 73 GitHub Repos After Credential Theft
What Happened Microsoft removed 73 GitHub repositories after malware compromised developer credentials and exposed a PyPI publishing token. The attack targeted the durabletask PyPI token, allowing an
Read