Miasma worm spreads via npm, forces GitHub to disable 73 Microsoft repos
Microsoft’s Threat Intelligence team uncovered the Miasma supply‑chain campaign, where malicious npm packages under the @redhat‑cloud‑services scope injected a pre‑install hook that hijacked developer credentials and propagated to 73 GitHub repositories across Azure, Azure‑Samples, Microsoft and MicrosoftDocs. GitHub responded by disabling the affected repos within minutes, highlighting the rapid spread of the self‑replicating worm.