Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Cato CTRL™ Threat Brief: AsyncAPI Supply Chain Attack Delivers Miasma Malware Through Trusted npm Packages
Excerpt
Executive Summary On July 14, 2026, attackers compromised release processes connected to the AsyncAPI open- source project and published malicious versions of four widely used npm packages with a combined reach of approximately 2.9 million weekly downloads. The affected releases delivered a Miasma-associated Node.js payload designed to establish persistence and communicate with attacker-controlled infrastructure, creating potential exposure across developer workstations,…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | rentry.co | Low | Score 32/100 | First seen |
| Domain | ipfs.io | Low | Score 47/100 | First seen |
IOC Relationship Graph
Building graph…