Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and Expands Into Go Ecosystem

A major supply chain attack wave is actively targeting software developers across both the npm and Go ecosystems. Security researchers are tracking a massive campaign tied to the Miasma, Mini Shai-Hulud, and Hades malware families. The attackers recently compromised dozens of npm packages within the LeoPlatform and RStreams ecosystems, which are heavily used in data pipeline workflows. While most of the tainted packages were published through a compromised maintainer’s…