Socket Threat Research tracks a Mini Shai-Hulud/Miasma supply-chain wave affecting LeoPlatform and RStreams npm packages, abusing GitHub Actions, expanding to Go modules, stealing developer secrets, and planting hooks for AI coding assistants such as Claude Code, Cursor, and Gemini CLI.
Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem
Socket Threat Research tracks a Mini Shai-Hulud/Miasma supply-chain wave affecting LeoPlatform and RStreams npm packages, abusing GitHub Actions, expanding to Go modules, stealing developer secrets, and planting hooks for AI coding assistants such as Claude Code, Cursor, and Gemini CLI.
Source: Socket