Leo Platform npm packages compromised in new Miasma supply‑chain attack
A fresh wave of the Shai‑Hulud Miasma campaign hijacked trusted Leo Platform npm packages, injecting malware via binding.gyp to run during node‑gyp installation. The compromise affects developer workstations, CI/CD pipelines, and production‑adjacent environments, forcing immediate removal of malicious versions and credential rotation. This underscores that a package’s trust is only as good as its latest release.