New Blog: Miasma Worm Infects Multiple LeoPlatform npm Packages

•

25 Jun 2026

sha256

4e927f22ad04f4ac9b487ae11412fc2a55210188789ac29f3a47ad77931907a5

discovered 2026-06-23

Obfuscated payload blob dist/bootstrap.js in @thymelab/logfx 2.15.5 (282151 bytes).

Campaigns

wshu.net npm Credential-Stealer Campaignattributed-to

Linked packages

npm @thymelab/logfxindicates

Read the full analysis →