New Blog: Miasma Worm Infects Multiple LeoPlatform npm Packages

•

25 Jun 2026

sha256

24c8f9b8ac17c2f88cc01d44543963206472112510962b68cf5f74d598b3b065

discovered 2026-06-23

Obfuscated payload blob script/prelude.cjs in @chunklab/hexparse 1.1.6 (277265 bytes).

Campaigns

wshu.net npm Credential-Stealer Campaignattributed-to

Linked packages

npm @chunklab/hexparseindicates

Read the full analysis →